Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-rx6q-hj2g-x8wp

Опубликовано: 28 нояб. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 4.4

Описание

A buffer overflow vulnerability in the Zyxel ATP series firmware version 5.37, USG FLEX series firmware version 5.37, USG FLEX 50(W) series firmware version 5.37, and USG20(W)-VPN series firmware version 5.37, could allow an authenticated local attacker with administrator privileges to cause denial-of-service (DoS) conditions by executing the CLI command with crafted strings on an affected device.

A buffer overflow vulnerability in the Zyxel ATP series firmware version 5.37, USG FLEX series firmware version 5.37, USG FLEX 50(W) series firmware version 5.37, and USG20(W)-VPN series firmware version 5.37, could allow an authenticated local attacker with administrator privileges to cause denial-of-service (DoS) conditions by executing the CLI command with crafted strings on an affected device.

EPSS

Процентиль: 12%
0.00041
Низкий

4.4 Medium

CVSS3

Дефекты

CWE-120

Связанные уязвимости

CVSS3: 4.4
nvd
около 2 лет назад

A buffer overflow vulnerability in the Zyxel ATP series firmware version 5.37, USG FLEX series firmware version 5.37, USG FLEX 50(W) series firmware version 5.37, and USG20(W)-VPN series firmware version 5.37, could allow an authenticated local attacker with administrator privileges to cause denial-of-service (DoS) conditions by executing the CLI command with crafted strings on an affected device.

CVSS3: 4.4
fstec
больше 2 лет назад

Уязвимость микропрограммного обеспечения сетевых устройств ZyXEL USG FLEX и ATP, связанная с выходом операции за границы буфера в памяти, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 12%
0.00041
Низкий

4.4 Medium

CVSS3

Дефекты

CWE-120