CVE-2023-27990: XSS
First published: Mon Apr 24 2023(Updated: )
The cross-site scripting (XSS) vulnerability in Zyxel ATP series firmware versions 4.32 through 5.35, USG FLEX series firmware versions 4.50 through 5.35, USG FLEX 50(W) firmware versions 4.16 through 5.35, USG20(W)-VPN firmware versions 4.16 through 5.35, and VPN series firmware versions 4.30 through 5.35, which could allow an authenticated attacker with administrator privileges to store malicious scripts in a vulnerable device. A successful XSS attack could then result in the stored malicious scripts being executed when the user visits the Logs page of the GUI on the device.
Credit: security@zyxel.com.tw security@zyxel.com.tw
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Zyxel Atp200 Firmware | >=4.32<5.36 | |
| Zyxel ATP200 | ||
| Zyxel Multiple Network-Attached Storage (NAS) Devices | >=4.32<5.36 | |
| Zyxel Multiple Network-Attached Storage (NAS) Devices | ||
| Zyxel Atp700 Firmware | >=4.32<5.36 | |
| Zyxel Atp700 | ||
| Zyxel Atp500 Firmware | >=4.32<5.36 | |
| Zyxel Atp500 | ||
| Zyxel Atp100w Firmware | >=4.32<5.36 | |
| Zyxel Atp100w | ||
| Zyxel Atp800 Firmware | >=4.32<5.36 | |
| Zyxel Atp800 | ||
| Zyxel Usg Flex 100 Firmware | >=4.50<5.36 | |
| Zyxel Usg Flex 100 | ||
| Zyxel Usg Flex 50 Firmware | >=4.50<5.36 | |
| Zyxel Usg Flex 50 | ||
| Zyxel Usg Flex 200 Firmware | >=4.50<5.36 | |
| Zyxel Usg Flex 200 | ||
| Zyxel Usg Flex 500 Firmware | >=4.50<5.36 | |
| Zyxel Usg Flex 500 | ||
| Zyxel Usg Flex 700 Firmware | >=4.50<5.36 | |
| Zyxel Usg Flex 700 | ||
| Zyxel Usg Flex 100w Firmware | >=4.50<5.36 | |
| Zyxel Usg Flex 100w | ||
| Zyxel Usg 20w-vpn Firmware | >=4.16<5.36 | |
| Zyxel Usg 20w-vpn | ||
| Zyxel Usg Flex 50w Firmware | >=4.16<5.36 | |
| Zyxel Usg Flex 50w | ||
| Zyxel Usg20-vpn Firmware | >=4.30<5.36 | |
| Zyxel Usg20-vpn | ||
| Zyxel Vpn100 Firmware | >=4.30<5.36 | |
| Zyxel Vpn100 | ||
| Zyxel Multiple Network-Attached Storage (NAS) Devices | >=4.30<5.36 | |
| Zyxel Multiple Network-Attached Storage (NAS) Devices | ||
| Zyxel Vpn300 Firmware | >=4.30<5.36 | |
| Zyxel Vpn300 | ||
| Zyxel Vpn50 Firmware | >=4.30<5.36 | |
| Zyxel Vpn50 | ||
| All of | ||
| Zyxel Atp200 Firmware | >=4.32<5.36 | |
| Zyxel ATP200 | ||
| All of | ||
| Zyxel Multiple Network-Attached Storage (NAS) Devices | >=4.32<5.36 | |
| Zyxel Multiple Network-Attached Storage (NAS) Devices | ||
| All of | ||
| Zyxel Atp700 Firmware | >=4.32<5.36 | |
| Zyxel Atp700 | ||
| All of | ||
| Zyxel Atp500 Firmware | >=4.32<5.36 | |
| Zyxel Atp500 | ||
| All of | ||
| Zyxel Atp100w Firmware | >=4.32<5.36 | |
| Zyxel Atp100w | ||
| All of | ||
| Zyxel Atp800 Firmware | >=4.32<5.36 | |
| Zyxel Atp800 | ||
| All of | ||
| Zyxel Usg Flex 100 Firmware | >=4.50<5.36 | |
| Zyxel Usg Flex 100 | ||
| All of | ||
| Zyxel Usg Flex 50 Firmware | >=4.50<5.36 | |
| Zyxel Usg Flex 50 | ||
| All of | ||
| Zyxel Usg Flex 200 Firmware | >=4.50<5.36 | |
| Zyxel Usg Flex 200 | ||
| All of | ||
| Zyxel Usg Flex 500 Firmware | >=4.50<5.36 | |
| Zyxel Usg Flex 500 | ||
| All of | ||
| Zyxel Usg Flex 700 Firmware | >=4.50<5.36 | |
| Zyxel Usg Flex 700 | ||
| All of | ||
| Zyxel Usg Flex 100w Firmware | >=4.50<5.36 | |
| Zyxel Usg Flex 100w | ||
| All of | ||
| Zyxel Usg 20w-vpn Firmware | >=4.16<5.36 | |
| Zyxel Usg 20w-vpn | ||
| All of | ||
| Zyxel Usg Flex 50w Firmware | >=4.16<5.36 | |
| Zyxel Usg Flex 50w | ||
| All of | ||
| Zyxel Usg20-vpn Firmware | >=4.30<5.36 | |
| Zyxel Usg20-vpn | ||
| All of | ||
| Zyxel Vpn100 Firmware | >=4.30<5.36 | |
| Zyxel Vpn100 | ||
| All of | ||
| Zyxel Multiple Network-Attached Storage (NAS) Devices | >=4.30<5.36 | |
| Zyxel Multiple Network-Attached Storage (NAS) Devices | ||
| All of | ||
| Zyxel Vpn300 Firmware | >=4.30<5.36 | |
| Zyxel Vpn300 | ||
| All of | ||
| Zyxel Vpn50 Firmware | >=4.30<5.36 | |
| Zyxel Vpn50 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the severity of CVE-2023-27990?
The severity of CVE-2023-27990 is medium with a severity value of 4.8.
Which software versions are affected by CVE-2023-27990?
CVE-2023-27990 affects Zyxel ATP series firmware versions 4.32 through 5.35, USG FLEX series firmware versions 4.50 through 5.35, USG FLEX 50(W) firmware versions 4.16 through 5.35, USG20(W)-VPN firmware versions 4.16 through 5.35, and VPN series firmware versions 4.30 through 5.35.
What is the Common Weakness Enumeration (CWE) of CVE-2023-27990?
The Common Weakness Enumeration (CWE) of CVE-2023-27990 is CWE-79.
How can I fix CVE-2023-27990?
To fix CVE-2023-27990, it is recommended to update to a firmware version that is not vulnerable. Refer to the vendor's security advisory for more information.
Where can I find more information about CVE-2023-27990?
You can find more information about CVE-2023-27990 in the vendor's security advisory at https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-xss-vulnerability-and-post-authentication-command-injection-vulnerability-in-firewalls
- collector/nvd-index
- agent/type
- agent/author
- agent/event
- agent/softwarecombine
- agent/first-publish-date
- agent/references
- agent/weakness
- agent/severity
- agent/tags
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/last-modified-date
- agent/description
- collector/mitre-cve
- source/MITRE
- vendor/zyxel
- canonical/zyxel atp200 firmware
- version/zyxel atp200 firmware/4.32
- canonical/zyxel atp200
- canonical/zyxel multiple network-attached storage (nas) devices
- version/zyxel multiple network-attached storage (nas) devices/4.32
- canonical/zyxel atp700 firmware
- version/zyxel atp700 firmware/4.32
- canonical/zyxel atp700
- canonical/zyxel atp500 firmware
- version/zyxel atp500 firmware/4.32
- canonical/zyxel atp500
- canonical/zyxel atp100w firmware
- version/zyxel atp100w firmware/4.32
- canonical/zyxel atp100w
- canonical/zyxel atp800 firmware
- version/zyxel atp800 firmware/4.32
- canonical/zyxel atp800
- canonical/zyxel usg flex 100 firmware
- version/zyxel usg flex 100 firmware/4.50
- canonical/zyxel usg flex 100
- canonical/zyxel usg flex 50 firmware
- version/zyxel usg flex 50 firmware/4.50
- canonical/zyxel usg flex 50
- canonical/zyxel usg flex 200 firmware
- version/zyxel usg flex 200 firmware/4.50
- canonical/zyxel usg flex 200
- canonical/zyxel usg flex 500 firmware
- version/zyxel usg flex 500 firmware/4.50
- canonical/zyxel usg flex 500
- canonical/zyxel usg flex 700 firmware
- version/zyxel usg flex 700 firmware/4.50
- canonical/zyxel usg flex 700
- canonical/zyxel usg flex 100w firmware
- version/zyxel usg flex 100w firmware/4.50
- canonical/zyxel usg flex 100w
- canonical/zyxel usg 20w-vpn firmware
- version/zyxel usg 20w-vpn firmware/4.16
- canonical/zyxel usg 20w-vpn
- canonical/zyxel usg flex 50w firmware
- version/zyxel usg flex 50w firmware/4.16
- canonical/zyxel usg flex 50w
- canonical/zyxel usg20-vpn firmware
- version/zyxel usg20-vpn firmware/4.30
- canonical/zyxel usg20-vpn
- canonical/zyxel vpn100 firmware
- version/zyxel vpn100 firmware/4.30
- canonical/zyxel vpn100
- version/zyxel multiple network-attached storage (nas) devices/4.30
- canonical/zyxel vpn300 firmware
- version/zyxel vpn300 firmware/4.30
- canonical/zyxel vpn300
- canonical/zyxel vpn50 firmware
- version/zyxel vpn50 firmware/4.30
- canonical/zyxel vpn50