← Database

CVE-2023-22917

HIGH CVSS: 7.5 Published: 2023-04-24 Modified: 2026-06-17

Description

A buffer overflow vulnerability in the “sdwan_iface_ipc” binary of Zyxel ATP series firmware versions 5.10 through 5.32, USG FLEX series firmware versions 5.00 through 5.32, USG FLEX 50(W) firmware versions 5.10 through 5.32, USG20(W)-VPN firmware versions 5.10 through 5.32, and VPN series firmware versions 5.00 through 5.35, which could allow a remote unauthenticated attacker to cause a core dump with a request error message on a vulnerable device by uploading a crafted configuration file.

Affected Platforms

Zyxel Usg Flex 100 FirmwareZyxel Usg Flex 500Zyxel Atp500 FirmwareZyxel Usg Flex 700Zyxel Atp700 FirmwareZyxel Usg Flex 700 FirmwareZyxel Atp700Zyxel Usg Flex 100W FirmwareZyxel Atp100W FirmwareZyxel Atp100

Weakness Type

CWE-120, CWE-120

References