← Database

CVE-2023-22915

HIGH CVSS: 7.5 Published: 2023-04-24 Modified: 2026-06-17

Description

A buffer overflow vulnerability in the “fbwifi_forward.cgi” CGI program of Zyxel USG FLEX series firmware versions 4.50 through 5.35, USG FLEX 50(W) firmware versions 4.30 through 5.35, USG20(W)-VPN firmware versions 4.30 through 5.35, and VPN series firmware versions 4.30 through 5.35, which could allow a remote unauthenticated attacker to cause DoS conditions by sending a crafted HTTP request if the Facebook WiFi function were enabled on an affected device.

Affected Platforms

Zyxel Usg Flex 100 FirmwareZyxel Usg Flex 500Zyxel Usg Flex 700Zyxel Usg Flex 700 FirmwareZyxel Usg Flex 100W FirmwareZyxel Vpn100Zyxel Vpn50Zyxel Vpn100 FirmwareZyxel Usg Flex 50WZyxel Usg Flex 100

Weakness Type

CWE-120, CWE-120

References