Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-22915

A buffer overflow vulnerability in the “fbwifi_forward.cgi” CGI program of Zyxel USG FLEX series firmware versions 4.50 through 5.35, USG FLEX 50(W) firmware versions 4.30 through 5.35, USG20(W)-VPN firmware versions 4.30 through 5.35, and VPN series firmware versions 4.30 through 5.35, which could allow a remote unauthenticated attacker to cause DoS conditions by sending a crafted HTTP request if the Facebook WiFi function were enabled on an affected device.

Published

2023-04-24T17:15:09.690

Last Modified

2024-11-21T07:45:38.473

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 7.5 (HIGH)

Weaknesses
  • Type: Secondary
    CWE-120
  • Type: Primary
    CWE-120
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System zyxel usg_flex_100_firmware ≤ 5.35 Yes
Hardware zyxel usg_flex_100 - No
Operating System zyxel usg_flex_100w_firmware ≤ 5.35 Yes
Hardware zyxel usg_flex_100w - No
Operating System zyxel usg_flex_200_firmware ≤ 5.35 Yes
Hardware zyxel usg_flex_200 - No
Operating System zyxel usg_flex_50_firmware ≤ 5.35 Yes
Hardware zyxel usg_flex_50 - No
Operating System zyxel usg_flex_50w_firmware ≤ 5.35 Yes
Hardware zyxel usg_flex_50w - No
Operating System zyxel usg_flex_500_firmware ≤ 5.35 Yes
Hardware zyxel usg_flex_500 - No
Operating System zyxel usg_flex_700_firmware ≤ 5.35 Yes
Hardware zyxel usg_flex_700 - No
Operating System zyxel vpn100_firmware ≤ 5.35 Yes
Hardware zyxel vpn100 - No
Operating System zyxel vpn1000_firmware ≤ 5.35 Yes
Hardware zyxel vpn1000 - No
Operating System zyxel vpn300_firmware ≤ 5.35 Yes
Hardware zyxel vpn300 - No
Operating System zyxel vpn50_firmware ≤ 5.35 Yes
Hardware zyxel vpn50 - No
Operating System zyxel usg_20w-vpn_firmware ≤ 5.35 Yes
Hardware zyxel usg_20w-vpn - No
References