CVE-2023-37925 | ByteOS Network

Vulnerability Details :

CVE-2023-37925

Assigner-Zyxel

Assigner Org ID-96e50032-ad0d-4058-a115-4d2c13821f9f

Published At-28 Nov, 2023 | 01:30

Updated At-02 Aug, 2024 | 17:23

An improper privilege management vulnerability in the debug CLI command of the Zyxel ATP series firmware versions 4.32 through 5.37, USG FLEX series firmware versions 4.50 through 5.37, USG FLEX 50(W) series firmware versions 4.16 through 5.37, USG20(W)-VPN series firmware versions 4.16 through 5.37, VPN series firmware versions 4.30 through 5.37, NWA50AX firmware version 6.29(ABYW.2), WAC500 firmware version 6.65(ABVS.1), WAX300H firmware version 6.60(ACHF.1), and WBE660S firmware version 6.65(ACGG.1), could allow an authenticated local attacker to access system files on an affected device.

EPSS History

Score

Latest Score

-

N/A

Percentile

Latest Percentile

-

N/A

▼Common Vulnerabilities and Exposures (CVE)

Assigner:Zyxel

Assigner Org ID:96e50032-ad0d-4058-a115-4d2c13821f9f

Published At:28 Nov, 2023 | 01:30

Updated At:02 Aug, 2024 | 17:23

▼CVE Numbering Authority (CNA)

An improper privilege management vulnerability in the debug CLI command of the Zyxel ATP series firmware versions 4.32 through 5.37, USG FLEX series firmware versions 4.50 through 5.37, USG FLEX 50(W) series firmware versions 4.16 through 5.37, USG20(W)-VPN series firmware versions 4.16 through 5.37, VPN series firmware versions 4.30 through 5.37, NWA50AX firmware version 6.29(ABYW.2), WAC500 firmware version 6.65(ABVS.1), WAX300H firmware version 6.60(ACHF.1), and WBE660S firmware version 6.65(ACGG.1), could allow an authenticated local attacker to access system files on an affected device.

Affected Products

Vendor

Zyxel Networks Corporation

Product

ATP series firmware

Default Status

unaffected

Versions

Affected

versions 4.32 through 5.37

Vendor

Zyxel Networks Corporation

Product

USG FLEX series firmware

Default Status

unaffected

Versions

Affected

versions 4.50 through 5.37

Vendor

Zyxel Networks Corporation

Product

USG FLEX 50(W) series firmware

Default Status

unaffected

Versions

Affected

versions 4.16 through 5.37

Vendor

Zyxel Networks Corporation

Product

USG20(W)-VPN series firmware

Default Status

unaffected

Versions

Affected

versions 4.16 through 5.37

Vendor

Zyxel Networks Corporation

Product

VPN series firmware

Default Status

unaffected

Versions

Affected

versions 4.30 through 5.37

Vendor

Zyxel Networks Corporation

Product

NWA50AX firmware

Default Status

unaffected

Versions

Affected

6.29(ABYW.2)

Vendor

Zyxel Networks Corporation

Product

WAC500 firmware

Default Status

unaffected

Versions

Affected

6.65(ABVS.1)

Vendor

Zyxel Networks Corporation

Product

WAX300H firmware

Default Status

unaffected

Versions

Affected

6.60(ACHF.1)

Vendor

Zyxel Networks Corporation

Product

WBE660S firmware

Default Status

unaffected

Versions

Affected

6.65(ACGG.1)

Problem Types

Type	CWE ID	Description
CWE	CWE-269	CWE-269 Improper Privilege Management

Type: CWE

CWE ID: CWE-269

Description: CWE-269 Improper Privilege Management

Metrics

Version	Base score	Base severity	Vector
3.1	5.5	MEDIUM	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Version: 3.1

Base score: 5.5

Base severity: MEDIUM

Vector:

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

References

Hyperlink	Resource
https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-multiple-vulnerabilities-in-firewalls-and-aps	vendor-advisory

Hyperlink: https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-multiple-vulnerabilities-in-firewalls-and-aps

Resource:

vendor-advisory

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-multiple-vulnerabilities-in-firewalls-and-aps	vendor-advisory x_transferred

Hyperlink: https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-multiple-vulnerabilities-in-firewalls-and-aps

Resource:

vendor-advisory

x_transferred

▼National Vulnerability Database (NVD)

Source:security@zyxel.com.tw

Published At:28 Nov, 2023 | 02:15

Updated At:04 Dec, 2023 | 18:09

An improper privilege management vulnerability in the debug CLI command of the Zyxel ATP series firmware versions 4.32 through 5.37, USG FLEX series firmware versions 4.50 through 5.37, USG FLEX 50(W) series firmware versions 4.16 through 5.37, USG20(W)-VPN series firmware versions 4.16 through 5.37, VPN series firmware versions 4.30 through 5.37, NWA50AX firmware version 6.29(ABYW.2), WAC500 firmware version 6.65(ABVS.1), WAX300H firmware version 6.60(ACHF.1), and WBE660S firmware version 6.65(ACGG.1), could allow an authenticated local attacker to access system files on an affected device.

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	5.5	MEDIUM	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Type: Primary

Version: 3.1

Base score: 5.5

Base severity: MEDIUM

Vector:

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CPE Matches

Zyxel Networks Corporation

cpe:2.3:h:zyxel:atp100:-:*:*:*:*:*:*:*

Zyxel Networks Corporation

cpe:2.3:h:zyxel:atp100w:-:*:*:*:*:*:*:*

Zyxel Networks Corporation

cpe:2.3:h:zyxel:atp200:-:*:*:*:*:*:*:*

Zyxel Networks Corporation

cpe:2.3:h:zyxel:atp500:-:*:*:*:*:*:*:*

Zyxel Networks Corporation

cpe:2.3:h:zyxel:atp700:-:*:*:*:*:*:*:*

Zyxel Networks Corporation

cpe:2.3:h:zyxel:atp800:-:*:*:*:*:*:*:*

Zyxel Networks Corporation

>>zld>>Versions from 4.32(inclusive) to 5.37(inclusive)

cpe:2.3:o:zyxel:zld:*:*:*:*:*:*:*:*

Zyxel Networks Corporation

>>usg_flex_100>>-

cpe:2.3:h:zyxel:usg_flex_100:-:*:*:*:*:*:*:*

Zyxel Networks Corporation

>>usg_flex_100w>>-

cpe:2.3:h:zyxel:usg_flex_100w:-:*:*:*:*:*:*:*

Zyxel Networks Corporation

>>usg_flex_200>>-

cpe:2.3:h:zyxel:usg_flex_200:-:*:*:*:*:*:*:*

Zyxel Networks Corporation

>>usg_flex_50>>-

cpe:2.3:h:zyxel:usg_flex_50:-:*:*:*:*:*:*:*

Zyxel Networks Corporation

>>usg_flex_500>>-

cpe:2.3:h:zyxel:usg_flex_500:-:*:*:*:*:*:*:*

Zyxel Networks Corporation

>>usg_flex_50w>>-

cpe:2.3:h:zyxel:usg_flex_50w:-:*:*:*:*:*:*:*

Zyxel Networks Corporation

>>usg_flex_700>>-

cpe:2.3:h:zyxel:usg_flex_700:-:*:*:*:*:*:*:*

Zyxel Networks Corporation

>>zld>>Versions from 4.50(inclusive) to 5.37(inclusive)

cpe:2.3:o:zyxel:zld:*:*:*:*:*:*:*:*

Zyxel Networks Corporation

>>usg_20w-vpn>>-

cpe:2.3:h:zyxel:usg_20w-vpn:-:*:*:*:*:*:*:*

Zyxel Networks Corporation

cpe:2.3:h:zyxel:vpn50w:-:*:*:*:*:*:*:*

Zyxel Networks Corporation

>>zld>>Versions from 4.16(inclusive) to 5.37(inclusive)

cpe:2.3:o:zyxel:zld:*:*:*:*:*:*:*:*

Zyxel Networks Corporation

cpe:2.3:h:zyxel:vpn100:-:*:*:*:*:*:*:*

Zyxel Networks Corporation

cpe:2.3:h:zyxel:vpn1000:-:*:*:*:*:*:*:*

Zyxel Networks Corporation

cpe:2.3:h:zyxel:vpn300:-:*:*:*:*:*:*:*

Zyxel Networks Corporation

>>vpn50>>-

cpe:2.3:h:zyxel:vpn50:-:*:*:*:*:*:*:*

Zyxel Networks Corporation

>>zld>>Versions from 4.30(inclusive) to 5.37(inclusive)

cpe:2.3:o:zyxel:zld:*:*:*:*:*:*:*:*

Zyxel Networks Corporation

cpe:2.3:h:zyxel:nwa110ax:-:*:*:*:*:*:*:*

Zyxel Networks Corporation

>>nwa110ax_firmware>>Versions before 6.70\(abtg.0\)(exclusive)

cpe:2.3:o:zyxel:nwa110ax_firmware:*:*:*:*:*:*:*:*

Zyxel Networks Corporation

>>nwa1123acv3>>-

cpe:2.3:h:zyxel:nwa1123acv3:-:*:*:*:*:*:*:*

Zyxel Networks Corporation

>>nwa1123acv3_firmware>>Versions before 6.70\(abvt.0\)(exclusive)

cpe:2.3:o:zyxel:nwa1123acv3_firmware:*:*:*:*:*:*:*:*

Zyxel Networks Corporation

cpe:2.3:h:zyxel:nwa210ax:-:*:*:*:*:*:*:*

Zyxel Networks Corporation

>>nwa210ax_firmware>>Versions before 6.70\(abtd.0\)(exclusive)

cpe:2.3:o:zyxel:nwa210ax_firmware:*:*:*:*:*:*:*:*

Zyxel Networks Corporation

>>nwa220ax-6e>>-

cpe:2.3:h:zyxel:nwa220ax-6e:-:*:*:*:*:*:*:*

Zyxel Networks Corporation

>>nwa220ax-6e_firmware>>Versions before 6.70\(acco.0\)(exclusive)

cpe:2.3:o:zyxel:nwa220ax-6e_firmware:*:*:*:*:*:*:*:*

Zyxel Networks Corporation

>>nwa50ax_firmware>>Versions before 6.80\(abyw.0\)(exclusive)

cpe:2.3:o:zyxel:nwa50ax_firmware:*:*:*:*:*:*:*:*

Zyxel Networks Corporation

cpe:2.3:h:zyxel:nwa50ax:-:*:*:*:*:*:*:*

Zyxel Networks Corporation

>>nwa50ax-pro_firmware>>Versions before 6.80\(acge.0\)(exclusive)

cpe:2.3:o:zyxel:nwa50ax-pro_firmware:*:*:*:*:*:*:*:*

Zyxel Networks Corporation

>>nwa50ax-pro>>-

cpe:2.3:h:zyxel:nwa50ax-pro:-:*:*:*:*:*:*:*

Zyxel Networks Corporation

>>nwa55axe_firmware>>Versions before 6.80\(abzl.0\)(exclusive)

cpe:2.3:o:zyxel:nwa55axe_firmware:*:*:*:*:*:*:*:*

Zyxel Networks Corporation

cpe:2.3:h:zyxel:nwa55axe:-:*:*:*:*:*:*:*

Zyxel Networks Corporation

>>nwa90ax_firmware>>Versions before 6.80\(accv.0\)(exclusive)

cpe:2.3:o:zyxel:nwa90ax_firmware:*:*:*:*:*:*:*:*

Zyxel Networks Corporation

cpe:2.3:h:zyxel:nwa90ax:-:*:*:*:*:*:*:*

Zyxel Networks Corporation

>>nwa90ax-pro_firmware>>Versions before 6.80\(acgf.0\)(exclusive)

cpe:2.3:o:zyxel:nwa90ax-pro_firmware:*:*:*:*:*:*:*:*

Zyxel Networks Corporation

>>nwa90ax-pro>>-

cpe:2.3:h:zyxel:nwa90ax-pro:-:*:*:*:*:*:*:*

Zyxel Networks Corporation

>>wac500_firmware>>Versions before 6.70\(abvs.0\)(exclusive)

cpe:2.3:o:zyxel:wac500_firmware:*:*:*:*:*:*:*:*

Zyxel Networks Corporation

cpe:2.3:h:zyxel:wac500:-:*:*:*:*:*:*:*

Zyxel Networks Corporation

>>wac500h_firmware>>Versions before 6.70\(abwa.0\)(exclusive)

cpe:2.3:o:zyxel:wac500h_firmware:*:*:*:*:*:*:*:*

Zyxel Networks Corporation

cpe:2.3:h:zyxel:wac500h:-:*:*:*:*:*:*:*

Zyxel Networks Corporation

>>wax510d_firmware>>Versions before 6.70\(abtf.0\)(exclusive)

cpe:2.3:o:zyxel:wax510d_firmware:*:*:*:*:*:*:*:*

Zyxel Networks Corporation

cpe:2.3:h:zyxel:wax510d:-:*:*:*:*:*:*:*

Zyxel Networks Corporation

>>wax610d_firmware>>Versions before 6.70\(abte.0\)(exclusive)

cpe:2.3:o:zyxel:wax610d_firmware:*:*:*:*:*:*:*:*

Zyxel Networks Corporation

cpe:2.3:h:zyxel:wax610d:-:*:*:*:*:*:*:*

Zyxel Networks Corporation

>>wax620d-6e_firmware>>Versions before 6.70\(accn.0\)(exclusive)

cpe:2.3:o:zyxel:wax620d-6e_firmware:*:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-269	Primary	security@zyxel.com.tw

CWE ID: CWE-269

Type: Primary

Source: security@zyxel.com.tw

References

Hyperlink	Source	Resource
https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-multiple-vulnerabilities-in-firewalls-and-aps	security@zyxel.com.tw	Vendor Advisory

Hyperlink: https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-multiple-vulnerabilities-in-firewalls-and-aps

Source: security@zyxel.com.tw

Resource:

Vendor Advisory