CVE-2023-22914: Path Traversal

Q: What is the vulnerability ID of the Zyxel USG FLEX series firmware?

The vulnerability ID of the Zyxel USG FLEX series firmware is CVE-2023-22914.

Q: What is the severity of CVE-2023-22914?

The severity of CVE-2023-22914 is high with a CVSS score of 7.2.

Q: Which Zyxel USG FLEX series firmware versions are affected by CVE-2023-22914?

Zyxel USG FLEX series firmware versions 4.50 through 5.35 are affected by CVE-2023-22914.

Q: How can a remote attacker exploit CVE-2023-22914?

A remote authenticated attacker with administrator privileges can exploit CVE-2023-22914 to execute unauthorized OS commands.

Q: What is the recommended action for fixing CVE-2023-22914?

Update the affected Zyxel USG FLEX series firmware versions to a patched version provided by Zyxel.

Published Apr 24, 2023

Updated

A path traversal vulnerability in the “accountprint.cgi” CGI program of Zyxel USG FLEX series firmware versions 4.50 through 5.35, and VPN series firmware versions 4.30 through 5.35, which could allow a remote authenticated attacker with administrator privileges to execute unauthorized OS commands in the “tmp” directory by uploading a crafted file if the hotspot function were enabled.

Affected Software

22 affected components

Zyxel Usg Flex 100 Firmware>=4.50<=5.35

Zyxel Usg Flex 100

Zyxel Usg Flex 100w Firmware>=4.50<=5.35

Zyxel Usg Flex 100w

Zyxel USG FLEX 200 firmware>=4.50<=5.35

Zyxel USG FLEX 200

Zyxel Usg Flex 50 Firmware>=4.50<=5.35

Zyxel USG FLEX 50

Zyxel Usg Flex 50w Firmware>=4.50<=5.35

Zyxel Usg Flex 50w

Zyxel USG FLEX 500 firmware>=4.50<=5.35

Zyxel USG FLEX 500

Zyxel USG FLEX 700 firmware>=4.50<=5.35

Zyxel USG FLEX 700

Zyxel Vpn100 Firmware>=4.50<=5.35

Zyxel Vpn100

Zyxel Vpn1000 Firmware>=4.50<=5.35

Zyxel Vpn1000

Zyxel Vpn300 Firmware>=4.50<=5.35

Zyxel Vpn300

Zyxel Vpn50 Firmware>=4.50<=5.35

Zyxel Vpn50

Event History

Apr 24, 2023

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the vulnerability ID of the Zyxel USG FLEX series firmware?

The vulnerability ID of the Zyxel USG FLEX series firmware is CVE-2023-22914.

What is the severity of CVE-2023-22914?

The severity of CVE-2023-22914 is high with a CVSS score of 7.2.

Which Zyxel USG FLEX series firmware versions are affected by CVE-2023-22914?

Zyxel USG FLEX series firmware versions 4.50 through 5.35 are affected by CVE-2023-22914.

How can a remote attacker exploit CVE-2023-22914?

A remote authenticated attacker with administrator privileges can exploit CVE-2023-22914 to execute unauthorized OS commands.

What is the recommended action for fixing CVE-2023-22914?