CVE-2023-5797
First published: Tue Nov 28 2023(Updated: )
An improper privilege management vulnerability in the debug CLI command of the Zyxel ATP series firmware versions 4.32 through 5.37, USG FLEX series firmware versions 4.50 through 5.37, USG FLEX 50(W) series firmware versions 4.16 through 5.37, USG20(W)-VPN series firmware versions 4.16 through 5.37, VPN series firmware versions 4.30 through 5.37, NWA50AX firmware version 6.29(ABYW.2), WAC500 firmware version 6.65(ABVS.1), WAX300H firmware version 6.60(ACHF.1), and WBE660S firmware version 6.65(ACGG.1), could allow an authenticated local attacker to access the administrator’s logs on an affected device.
Credit: security@zyxel.com.tw
| Affected Software | Affected Version | How to fix |
|---|---|---|
| All of | ||
| Zyxel ZLD Firmware | >=4.32<=5.37 | |
| Any of | ||
| Zyxel ATP100 Firmware | ||
| Zyxel ATP100W Firmware | ||
| Zyxel ATP200 firmware | ||
| Zyxel ATP500 Firmware | ||
| Zyxel ATP700 Firmware | ||
| Zyxel ATP800 Firmware | ||
| All of | ||
| Zyxel ZLD Firmware | >=4.50<=5.37 | |
| Any of | ||
| Zyxel USG FLEX 100 | ||
| Zyxel USG FLEX 100w firmware | ||
| Zyxel USG FLEX 200 firmware | ||
| Zyxel USG FLEX 50 | ||
| Zyxel USG FLEX 500 firmware | ||
| Zyxel USG FLEX 50(W) series firmware | ||
| Zyxel USG FLEX 700 firmware | ||
| All of | ||
| Zyxel ZLD Firmware | >=4.16<=5.37 | |
| Any of | ||
| Zyxel USG20 | ||
| Zyxel VPN50 | ||
| All of | ||
| Zyxel ZLD Firmware | >=4.30<=5.37 | |
| Any of | ||
| Zyxel VPN100 Firmware | ||
| Zyxel VPN1000 Firmware | ||
| Zyxel Zywall VPN300 | ||
| Zyxel VPN50 Firmware | ||
| All of | ||
| Zyxel NWA110AX firmware | <6.70\(abtg.0\) | |
| Zyxel NWA110AX | ||
| All of | ||
| Zyxel NWA1123-AC PRO firmware | <6.70\(abvt.0\) | |
| Zyxel NWA1123-AC PRO firmware | ||
| All of | ||
| Zyxel NWA210AX | <6.70\(abtd.0\) | |
| Zyxel NWA210AX Firmware | ||
| All of | ||
| Zyxel nwa220ax-6e firmware | <6.70\(acco.0\) | |
| Zyxel NWA220AX-6E | ||
| All of | ||
| Zyxel NWA50AX-Pro firmware | <6.80\(abyw.0\) | |
| Zyxel NWA50AX-PRO | ||
| All of | ||
| Zyxel NWA50AX Pro | <6.80\(acge.0\) | |
| Zyxel NWA50AX-Pro firmware | ||
| All of | ||
| Zyxel NWA55AXE Firmware | <6.80\(abzl.0\) | |
| Zyxel NWA55AXE Firmware | ||
| All of | ||
| Zyxel NWA90AX Pro Firmware | <6.80\(accv.0\) | |
| Zyxel NWA90AX Firmware | ||
| All of | ||
| Zyxel NWA90AX Pro Firmware | <6.80\(acgf.0\) | |
| Zyxel NWA90AX-PRO Firmware | ||
| All of | ||
| Zyxel WAC500H Firmware | <6.70\(abvs.0\) | |
| Zyxel WAC500 firmware | ||
| All of | ||
| Zyxel WAC500H Firmware | <6.70\(abwa.0\) | |
| Zyxel WAC500H Firmware | ||
| All of | ||
| Zyxel WAX510D firmware | <6.70\(abtf.0\) | |
| Zyxel WAX510D firmware | ||
| All of | ||
| Zyxel WAX610D | <6.70\(abte.0\) | |
| Zyxel WAX610D Firmware | ||
| All of | ||
| Zyxel WAX620D-6E | <6.70\(accn.0\) | |
| Zyxel WAX620D-6E Firmware | ||
| All of | ||
| Zyxel WAX630S Firmware | <6.70\(abzd.0\) | |
| Zyxel WAX630S Firmware | ||
| All of | ||
| Zyxel WAX640S-6E | <6.70\(accm.0\) | |
| Zyxel WAX640S-6E Firmware | ||
| All of | ||
| Zyxel wax650s firmware | <6.70\(abrm.0\) | |
| Zyxel WAX650S | ||
| All of | ||
| Zyxel WAX655E Firmware | <6.70\(acdo.0\) | |
| Zyxel WAX655E Firmware | ||
| All of | ||
| Zyxel WBE660S firmware | <6.70\(acgg.0\) | |
| Zyxel WBE660S firmware |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2023-5797?
The severity of CVE-2023-5797 is classified as high, due to improper privilege management risks.
How do I fix CVE-2023-5797?
To fix CVE-2023-5797, users should update their Zyxel ATP, USG FLEX, and other affected firmware to the latest patched versions provided by Zyxel.
What are the affected firmware versions for CVE-2023-5797?
CVE-2023-5797 affects Zyxel ATP series firmware versions 4.32 through 5.37, USG FLEX series firmware versions 4.50 through 5.37, and related firmware from multiple Zyxel products.
What types of devices are impacted by CVE-2023-5797?
CVE-2023-5797 impacts devices including Zyxel ATP firewalls, USG FLEX series firewalls, and other related network security appliances.
Is there a workaround for CVE-2023-5797?
Currently, the recommended action for CVE-2023-5797 is to apply the firmware updates as they serve as the most effective solution.
- agent/type
- agent/event
- agent/first-publish-date
- agent/weakness
- agent/author
- agent/severity
- agent/references
- collector/epss-latest
- source/FIRST
- agent/description
- agent/epss
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/source
- agent/tags
- agent/softwarecombine
- collector/nvd-api
- agent/software-canonical-lookup-request
- vendor/zyxel
- canonical/zyxel zld firmware
- version/zyxel zld firmware/4.32
- version/zyxel zld firmware/5.37
- canonical/zyxel atp100 firmware
- canonical/zyxel atp100w firmware
- canonical/zyxel atp200 firmware
- canonical/zyxel atp500 firmware
- canonical/zyxel atp700 firmware
- canonical/zyxel atp800 firmware
- version/zyxel zld firmware/4.50
- canonical/zyxel usg flex 100
- canonical/zyxel usg flex 100w firmware
- canonical/zyxel usg flex 200 firmware
- canonical/zyxel usg flex 50
- canonical/zyxel usg flex 500 firmware
- canonical/zyxel usg flex 50(w) series firmware
- canonical/zyxel usg flex 700 firmware
- version/zyxel zld firmware/4.16
- canonical/zyxel usg20
- canonical/zyxel vpn50
- version/zyxel zld firmware/4.30
- canonical/zyxel vpn100 firmware
- canonical/zyxel vpn1000 firmware
- canonical/zyxel zywall vpn300
- canonical/zyxel vpn50 firmware
- canonical/zyxel nwa110ax firmware
- canonical/zyxel nwa110ax
- canonical/zyxel nwa1123-ac pro firmware
- canonical/zyxel nwa210ax
- canonical/zyxel nwa210ax firmware
- canonical/zyxel nwa220ax-6e firmware
- canonical/zyxel nwa220ax-6e
- canonical/zyxel nwa50ax-pro firmware
- canonical/zyxel nwa50ax-pro
- canonical/zyxel nwa50ax pro
- canonical/zyxel nwa55axe firmware
- canonical/zyxel nwa90ax pro firmware
- canonical/zyxel nwa90ax firmware
- canonical/zyxel nwa90ax-pro firmware
- canonical/zyxel wac500h firmware
- canonical/zyxel wac500 firmware
- canonical/zyxel wax510d firmware
- canonical/zyxel wax610d
- canonical/zyxel wax610d firmware
- canonical/zyxel wax620d-6e
- canonical/zyxel wax620d-6e firmware
- canonical/zyxel wax630s firmware
- canonical/zyxel wax640s-6e
- canonical/zyxel wax640s-6e firmware
- canonical/zyxel wax650s firmware
- canonical/zyxel wax650s
- canonical/zyxel wax655e firmware
- canonical/zyxel wbe660s firmware