CVE-2023-33010: Zyxel Multiple Firewalls Buffer Overflow Vulnerability
First published: Wed May 24 2023(Updated: )
A buffer overflow vulnerability in the ID processing function in Zyxel ATP series firmware versions 4.32 through 5.36 Patch 1, USG FLEX series firmware versions 4.50 through 5.36 Patch 1, USG FLEX 50(W) firmware versions 4.25 through 5.36 Patch 1, USG20(W)-VPN firmware versions 4.25 through 5.36 Patch 1, VPN series firmware versions 4.30 through 5.36 Patch 1, ZyWALL/USG series firmware versions 4.25 through 4.73 Patch 1, could allow an unauthenticated attacker to cause denial-of-service (DoS) conditions and even a remote code execution on an affected device.
Credit: security@zyxel.com.tw security@zyxel.com.tw
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Zyxel Multiple Network-Attached Storage (NAS) Devices | >=4.32<5.36 | |
| Zyxel Multiple Network-Attached Storage (NAS) Devices | =5.36 | |
| Zyxel Multiple Network-Attached Storage (NAS) Devices | =5.36-patch1 | |
| Zyxel Multiple Network-Attached Storage (NAS) Devices | ||
| Zyxel Atp200 Firmware | >=4.32<5.36 | |
| Zyxel Atp200 Firmware | =5.36 | |
| Zyxel Atp200 Firmware | =5.36-patch1 | |
| Zyxel ATP200 | ||
| Zyxel Atp500 Firmware | >=4.32<5.36 | |
| Zyxel Atp500 Firmware | =5.36 | |
| Zyxel Atp500 Firmware | =5.36-patch1 | |
| Zyxel Atp500 | ||
| Zyxel Atp100w Firmware | >=4.32<5.36 | |
| Zyxel Atp100w Firmware | =5.36 | |
| Zyxel Atp100w Firmware | =5.36-patch1 | |
| Zyxel Atp100w | ||
| Zyxel Atp700 Firmware | >=4.32<5.36 | |
| Zyxel Atp700 Firmware | =5.36 | |
| Zyxel Atp700 Firmware | =5.36-patch1 | |
| Zyxel Atp700 | ||
| Zyxel Atp800 Firmware | >=4.32<5.36 | |
| Zyxel Atp800 Firmware | =5.36 | |
| Zyxel Atp800 Firmware | =5.36-patch1 | |
| Zyxel Atp800 | ||
| Zyxel Usg Flex 100 Firmware | >=4.50<5.36 | |
| Zyxel Usg Flex 100 Firmware | =5.36 | |
| Zyxel Usg Flex 100 Firmware | =5.36-patch1 | |
| Zyxel Usg Flex 100 | ||
| Zyxel Usg Flex 50 Firmware | =5.36 | |
| Zyxel Usg Flex 50 Firmware | =5.36-patch1 | |
| Zyxel Usg Flex 50 | ||
| Zyxel Usg Flex 200 Firmware | >=4.50<5.36 | |
| Zyxel Usg Flex 200 Firmware | =5.36 | |
| Zyxel Usg Flex 200 Firmware | =5.36-patch1 | |
| Zyxel Usg Flex 200 | ||
| Zyxel Usg Flex 500 Firmware | >=4.50<5.36 | |
| Zyxel Usg Flex 500 Firmware | =5.36 | |
| Zyxel Usg Flex 500 Firmware | =5.36-patch1 | |
| Zyxel Usg Flex 500 | ||
| Zyxel Usg Flex 700 Firmware | >=4.50<5.36 | |
| Zyxel Usg Flex 700 Firmware | =5.36 | |
| Zyxel Usg Flex 700 Firmware | =5.36-patch1 | |
| Zyxel Usg Flex 700 | ||
| Zyxel Usg Flex 100w Firmware | =5.36 | |
| Zyxel Usg Flex 100w Firmware | =5.36-patch1 | |
| Zyxel Usg Flex 100w | ||
| Zyxel Usg Flex 50w Firmware | >=4.25<5.36 | |
| Zyxel Usg Flex 50w Firmware | =5.36 | |
| Zyxel Usg Flex 50w Firmware | =5.36-patch1 | |
| Zyxel Usg Flex 50w | ||
| Zyxel Usg 20w-vpn Firmware | =5.36 | |
| Zyxel Usg 20w-vpn Firmware | =5.36-patch1 | |
| Zyxel Usg 20w-vpn | ||
| Zyxel Vpn100 Firmware | >=4.30<5.36 | |
| Zyxel Vpn100 Firmware | =5.36 | |
| Zyxel Vpn100 Firmware | =5.36-patch1 | |
| Zyxel Vpn100 | ||
| Zyxel Vpn50 Firmware | >=4.30<5.36 | |
| Zyxel Vpn50 Firmware | =5.36 | |
| Zyxel Vpn50 Firmware | =5.36-patch1 | |
| Zyxel Vpn50 | ||
| Zyxel Vpn300 Firmware | >=4.30<5.36 | |
| Zyxel Vpn300 Firmware | =5.36 | |
| Zyxel Vpn300 Firmware | =5.36-patch1 | |
| Zyxel Vpn300 | ||
| Zyxel Multiple Network-Attached Storage (NAS) Devices | >=4.30<5.36 | |
| Zyxel Multiple Network-Attached Storage (NAS) Devices | =5.36 | |
| Zyxel Multiple Network-Attached Storage (NAS) Devices | =5.36-patch1 | |
| Zyxel Multiple Network-Attached Storage (NAS) Devices | ||
| Zyxel Usg20-vpn Firmware | >=4.30<5.36 | |
| Zyxel Usg20-vpn Firmware | =5.36 | |
| Zyxel Usg20-vpn Firmware | =5.36-patch1 | |
| Zyxel Usg20-vpn | ||
| Zyxel Usg 40 Firmware | >=4.25<4.73 | |
| Zyxel Usg 40 Firmware | =4.73 | |
| Zyxel Usg 40 Firmware | =4.73-patch1 | |
| Zyxel Usg 40 | ||
| Zyxel Usg 40w Firmware | >=4.25<4.73 | |
| Zyxel Usg 40w Firmware | =4.73 | |
| Zyxel Usg 40w Firmware | =4.73-patch1 | |
| Zyxel Usg 40w | ||
| Zyxel Usg 60w Firmware | >=4.25<4.73 | |
| Zyxel Usg 60w Firmware | =4.73 | |
| Zyxel Usg 60w Firmware | =4.73-patch1 | |
| Zyxel Usg 60w | ||
| Zyxel Usg 60 Firmware | >=4.25<4.73 | |
| Zyxel Usg 60 Firmware | =4.73 | |
| Zyxel Usg 60 Firmware | =4.73-patch1 | |
| Zyxel Usg 60 | ||
| Zyxel Multiple Firewalls | ||
| All of | ||
| Any of | ||
| Zyxel Atp100 Firmware | >=4.32<5.36 | |
| Zyxel Atp100 Firmware | =5.36 | |
| Zyxel Atp100 Firmware | =5.36-patch1 | |
| Zyxel Atp100 | ||
| All of | ||
| Any of | ||
| Zyxel Atp200 Firmware | >=4.32<5.36 | |
| Zyxel Atp200 Firmware | =5.36 | |
| Zyxel Atp200 Firmware | =5.36-patch1 | |
| Zyxel ATP200 | ||
| All of | ||
| Any of | ||
| Zyxel Atp500 Firmware | >=4.32<5.36 | |
| Zyxel Atp500 Firmware | =5.36 | |
| Zyxel Atp500 Firmware | =5.36-patch1 | |
| Zyxel Atp500 | ||
| All of | ||
| Any of | ||
| Zyxel Atp100w Firmware | >=4.32<5.36 | |
| Zyxel Atp100w Firmware | =5.36 | |
| Zyxel Atp100w Firmware | =5.36-patch1 | |
| Zyxel Atp100w | ||
| All of | ||
| Any of | ||
| Zyxel Atp700 Firmware | >=4.32<5.36 | |
| Zyxel Atp700 Firmware | =5.36 | |
| Zyxel Atp700 Firmware | =5.36-patch1 | |
| Zyxel Atp700 | ||
| All of | ||
| Any of | ||
| Zyxel Atp800 Firmware | >=4.32<5.36 | |
| Zyxel Atp800 Firmware | =5.36 | |
| Zyxel Atp800 Firmware | =5.36-patch1 | |
| Zyxel Atp800 | ||
| All of | ||
| Any of | ||
| Zyxel Usg Flex 100 Firmware | >=4.50<5.36 | |
| Zyxel Usg Flex 100 Firmware | =5.36 | |
| Zyxel Usg Flex 100 Firmware | =5.36-patch1 | |
| Zyxel Usg Flex 100 | ||
| All of | ||
| Any of | ||
| Zyxel Usg Flex 50 Firmware | =5.36 | |
| Zyxel Usg Flex 50 Firmware | =5.36-patch1 | |
| Zyxel Usg Flex 50 | ||
| All of | ||
| Any of | ||
| Zyxel Usg Flex 200 Firmware | >=4.50<5.36 | |
| Zyxel Usg Flex 200 Firmware | =5.36 | |
| Zyxel Usg Flex 200 Firmware | =5.36-patch1 | |
| Zyxel Usg Flex 200 | ||
| All of | ||
| Any of | ||
| Zyxel Usg Flex 500 Firmware | >=4.50<5.36 | |
| Zyxel Usg Flex 500 Firmware | =5.36 | |
| Zyxel Usg Flex 500 Firmware | =5.36-patch1 | |
| Zyxel Usg Flex 500 | ||
| All of | ||
| Any of | ||
| Zyxel Usg Flex 700 Firmware | >=4.50<5.36 | |
| Zyxel Usg Flex 700 Firmware | =5.36 | |
| Zyxel Usg Flex 700 Firmware | =5.36-patch1 | |
| Zyxel Usg Flex 700 | ||
| All of | ||
| Any of | ||
| Zyxel Usg Flex 100 Firmware | >=4.50<5.36 | |
| Zyxel Usg Flex 100w Firmware | =5.36 | |
| Zyxel Usg Flex 100w Firmware | =5.36-patch1 | |
| Zyxel Usg Flex 100w | ||
| All of | ||
| Any of | ||
| Zyxel Usg Flex 50w Firmware | >=4.25<5.36 | |
| Zyxel Usg Flex 50w Firmware | =5.36 | |
| Zyxel Usg Flex 50w Firmware | =5.36-patch1 | |
| Zyxel Usg Flex 50w | ||
| All of | ||
| Any of | ||
| Zyxel Usg 20w-vpn Firmware | =5.36 | |
| Zyxel Usg 20w-vpn Firmware | =5.36-patch1 | |
| Zyxel Usg 20w-vpn | ||
| All of | ||
| Any of | ||
| Zyxel Vpn100 Firmware | >=4.30<5.36 | |
| Zyxel Vpn100 Firmware | =5.36 | |
| Zyxel Vpn100 Firmware | =5.36-patch1 | |
| Zyxel Vpn100 | ||
| All of | ||
| Any of | ||
| Zyxel Vpn50 Firmware | >=4.30<5.36 | |
| Zyxel Vpn50 Firmware | =5.36 | |
| Zyxel Vpn50 Firmware | =5.36-patch1 | |
| Zyxel Vpn50 | ||
| All of | ||
| Any of | ||
| Zyxel Vpn300 Firmware | >=4.30<5.36 | |
| Zyxel Vpn300 Firmware | =5.36 | |
| Zyxel Vpn300 Firmware | =5.36-patch1 | |
| Zyxel Vpn300 | ||
| All of | ||
| Any of | ||
| Zyxel Vpn1000 Firmware | >=4.30<5.36 | |
| Zyxel Vpn1000 Firmware | =5.36 | |
| Zyxel Vpn1000 Firmware | =5.36-patch1 | |
| Zyxel Vpn1000 | ||
| All of | ||
| Any of | ||
| Zyxel Usg20-vpn Firmware | >=4.30<5.36 | |
| Zyxel Usg20-vpn Firmware | =5.36 | |
| Zyxel Usg20-vpn Firmware | =5.36-patch1 | |
| Zyxel Usg20-vpn | ||
| All of | ||
| Any of | ||
| Zyxel Usg 40 Firmware | >=4.25<4.73 | |
| Zyxel Usg 40 Firmware | =4.73 | |
| Zyxel Usg 40 Firmware | =4.73-patch1 | |
| Zyxel Usg 40 | ||
| All of | ||
| Any of | ||
| Zyxel Usg 40w Firmware | >=4.25<4.73 | |
| Zyxel Usg 40w Firmware | =4.73 | |
| Zyxel Usg 40w Firmware | =4.73-patch1 | |
| Zyxel Usg 40w | ||
| All of | ||
| Any of | ||
| Zyxel Usg 60w Firmware | >=4.25<4.73 | |
| Zyxel Usg 60w Firmware | =4.73 | |
| Zyxel Usg 60w Firmware | =4.73-patch1 | |
| Zyxel Usg 60w | ||
| All of | ||
| Any of | ||
| Zyxel Usg 60 Firmware | >=4.25<4.73 | |
| Zyxel Usg 60 Firmware | =4.73 | |
| Zyxel Usg 60 Firmware | =4.73-patch1 | |
| Zyxel Usg 60 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-multiple-buffer-overflow-vulnerabilities-of-firewalls
- https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-multiple-buffer-overflow-vulnerabilities-of-firewalls;
- https://nvd.nist.gov/vuln/detail/CVE-2023-33010
Frequently Asked Questions
What is CVE-2023-33010?
CVE-2023-33010 is a buffer overflow vulnerability in the ID processing function in Zyxel ATP series firmware versions 4.32 through 5.36 Patch 1, USG FLEX series firmware versions 4.50 through 5.36 Patch 1, USG FLEX 50(W) firmware versions 4.25 through 5.36 Patch 1, USG20(W)-VPN firmware versions 4.25 through 5.36 Patch 1.
How does CVE-2023-33010 affect Zyxel Multiple Firewalls?
CVE-2023-33010 affects Zyxel Multiple Firewalls by exploiting a buffer overflow vulnerability in the ID processing function.
What is the severity of CVE-2023-33010?
The severity of CVE-2023-33010 is not mentioned in the available information.
How can I fix CVE-2023-33010?
To fix CVE-2023-33010, it is recommended to apply the latest firmware updates provided by Zyxel.
Where can I find more information about CVE-2023-33010?
You can find more information about CVE-2023-33010 in the Zyxel security advisory for multiple buffer overflow vulnerabilities of firewalls.
- collector/nvd-latest
- collector/nvd-index
- agent/type
- agent/title
- agent/weakness
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/last-modified-date
- agent/first-publish-date
- exploited/true
- collector/cisa-known-exploited
- source/CISA
- agent/software-canonical-lookup
- agent/references
- agent/author
- agent/tags
- agent/softwarecombine
- agent/event
- collector/nvd-cve
- source/NVD
- vendor/zyxel
- canonical/zyxel multiple network-attached storage (nas) devices
- version/zyxel multiple network-attached storage (nas) devices/4.32
- version/zyxel multiple network-attached storage (nas) devices/5.36
- version/zyxel multiple network-attached storage (nas) devices/5.36-patch1
- canonical/zyxel atp200 firmware
- version/zyxel atp200 firmware/4.32
- version/zyxel atp200 firmware/5.36
- version/zyxel atp200 firmware/5.36-patch1
- canonical/zyxel atp200
- canonical/zyxel atp500 firmware
- version/zyxel atp500 firmware/4.32
- version/zyxel atp500 firmware/5.36
- version/zyxel atp500 firmware/5.36-patch1
- canonical/zyxel atp500
- canonical/zyxel atp100w firmware
- version/zyxel atp100w firmware/4.32
- version/zyxel atp100w firmware/5.36
- version/zyxel atp100w firmware/5.36-patch1
- canonical/zyxel atp100w
- canonical/zyxel atp700 firmware
- version/zyxel atp700 firmware/4.32
- version/zyxel atp700 firmware/5.36
- version/zyxel atp700 firmware/5.36-patch1
- canonical/zyxel atp700
- canonical/zyxel atp800 firmware
- version/zyxel atp800 firmware/4.32
- version/zyxel atp800 firmware/5.36
- version/zyxel atp800 firmware/5.36-patch1
- canonical/zyxel atp800
- canonical/zyxel usg flex 100 firmware
- version/zyxel usg flex 100 firmware/4.50
- version/zyxel usg flex 100 firmware/5.36
- version/zyxel usg flex 100 firmware/5.36-patch1
- canonical/zyxel usg flex 100
- canonical/zyxel usg flex 50 firmware
- version/zyxel usg flex 50 firmware/5.36
- version/zyxel usg flex 50 firmware/5.36-patch1
- canonical/zyxel usg flex 50
- canonical/zyxel usg flex 200 firmware
- version/zyxel usg flex 200 firmware/4.50
- version/zyxel usg flex 200 firmware/5.36
- version/zyxel usg flex 200 firmware/5.36-patch1
- canonical/zyxel usg flex 200
- canonical/zyxel usg flex 500 firmware
- version/zyxel usg flex 500 firmware/4.50
- version/zyxel usg flex 500 firmware/5.36
- version/zyxel usg flex 500 firmware/5.36-patch1
- canonical/zyxel usg flex 500
- canonical/zyxel usg flex 700 firmware
- version/zyxel usg flex 700 firmware/4.50
- version/zyxel usg flex 700 firmware/5.36
- version/zyxel usg flex 700 firmware/5.36-patch1
- canonical/zyxel usg flex 700
- canonical/zyxel usg flex 100w firmware
- version/zyxel usg flex 100w firmware/5.36
- version/zyxel usg flex 100w firmware/5.36-patch1
- canonical/zyxel usg flex 100w
- canonical/zyxel usg flex 50w firmware
- version/zyxel usg flex 50w firmware/4.25
- version/zyxel usg flex 50w firmware/5.36
- version/zyxel usg flex 50w firmware/5.36-patch1
- canonical/zyxel usg flex 50w
- canonical/zyxel usg 20w-vpn firmware
- version/zyxel usg 20w-vpn firmware/5.36
- version/zyxel usg 20w-vpn firmware/5.36-patch1
- canonical/zyxel usg 20w-vpn
- canonical/zyxel vpn100 firmware
- version/zyxel vpn100 firmware/4.30
- version/zyxel vpn100 firmware/5.36
- version/zyxel vpn100 firmware/5.36-patch1
- canonical/zyxel vpn100
- canonical/zyxel vpn50 firmware
- version/zyxel vpn50 firmware/4.30
- version/zyxel vpn50 firmware/5.36
- version/zyxel vpn50 firmware/5.36-patch1
- canonical/zyxel vpn50
- canonical/zyxel vpn300 firmware
- version/zyxel vpn300 firmware/4.30
- version/zyxel vpn300 firmware/5.36
- version/zyxel vpn300 firmware/5.36-patch1
- canonical/zyxel vpn300
- version/zyxel multiple network-attached storage (nas) devices/4.30
- canonical/zyxel usg20-vpn firmware
- version/zyxel usg20-vpn firmware/4.30
- version/zyxel usg20-vpn firmware/5.36
- version/zyxel usg20-vpn firmware/5.36-patch1
- canonical/zyxel usg20-vpn
- canonical/zyxel usg 40 firmware
- version/zyxel usg 40 firmware/4.25
- version/zyxel usg 40 firmware/4.73
- version/zyxel usg 40 firmware/4.73-patch1
- canonical/zyxel usg 40
- canonical/zyxel usg 40w firmware
- version/zyxel usg 40w firmware/4.25
- version/zyxel usg 40w firmware/4.73
- version/zyxel usg 40w firmware/4.73-patch1
- canonical/zyxel usg 40w
- canonical/zyxel usg 60w firmware
- version/zyxel usg 60w firmware/4.25
- version/zyxel usg 60w firmware/4.73
- version/zyxel usg 60w firmware/4.73-patch1
- canonical/zyxel usg 60w
- canonical/zyxel usg 60 firmware
- version/zyxel usg 60 firmware/4.25
- version/zyxel usg 60 firmware/4.73
- version/zyxel usg 60 firmware/4.73-patch1
- canonical/zyxel usg 60
- canonical/zyxel multiple firewalls
- canonical/zyxel atp100 firmware
- version/zyxel atp100 firmware/4.32
- version/zyxel atp100 firmware/5.36
- version/zyxel atp100 firmware/5.36-patch1
- canonical/zyxel atp100
- canonical/zyxel vpn1000 firmware
- version/zyxel vpn1000 firmware/4.30
- version/zyxel vpn1000 firmware/5.36
- version/zyxel vpn1000 firmware/5.36-patch1
- canonical/zyxel vpn1000