An improper privilege management vulnerability in the hotspot feature of the Zyxel USG FLEX series firmware versions 4.50 through 5.37 and VPN series firmware versions 4.30 through 5.37 could allow an authenticated local attacker to access the system files on an affected device.
References
Configurations
Configuration 1 (hide)
| AND |
|
Configuration 2 (hide)
| AND |
|
History
01 Dec 2023, 21:43
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-multiple-vulnerabilities-in-firewalls-and-aps - Vendor Advisory | |
| CPE | cpe:2.3:h:zyxel:vpn1000:-:*:*:*:*:*:*:* cpe:2.3:h:zyxel:usg_flex_100w:-:*:*:*:*:*:*:* cpe:2.3:o:zyxel:zld:*:*:*:*:*:*:*:* cpe:2.3:h:zyxel:usg_flex_200:-:*:*:*:*:*:*:* cpe:2.3:h:zyxel:usg_flex_500:-:*:*:*:*:*:*:* cpe:2.3:h:zyxel:vpn50:-:*:*:*:*:*:*:* cpe:2.3:h:zyxel:usg_flex_700:-:*:*:*:*:*:*:* cpe:2.3:h:zyxel:usg_flex_50w:-:*:*:*:*:*:*:* cpe:2.3:h:zyxel:usg_flex_50:-:*:*:*:*:*:*:* cpe:2.3:h:zyxel:usg_flex_100:-:*:*:*:*:*:*:* cpe:2.3:h:zyxel:vpn300:-:*:*:*:*:*:*:* cpe:2.3:h:zyxel:vpn100:-:*:*:*:*:*:*:* |
|
| First Time |
Zyxel vpn50
Zyxel vpn100 Zyxel usg Flex 700 Zyxel usg Flex 200 Zyxel vpn1000 Zyxel zld Zyxel usg Flex 100 Zyxel usg Flex 100w Zyxel vpn300 Zyxel usg Flex 500 Zyxel usg Flex 50w Zyxel Zyxel usg Flex 50 |
28 Nov 2023, 03:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-11-28 03:15
Updated : 2023-12-01 21:43
NVD link : CVE-2023-5960
Mitre link : CVE-2023-5960
JSON object : View
Products Affected
zyxel
- usg_flex_50
- usg_flex_700
- vpn1000
- vpn100
- usg_flex_500
- zld
- usg_flex_200
- usg_flex_50w
- usg_flex_100w
- vpn300
- vpn50
- usg_flex_100
CWE
CWE-269
Improper Privilege Management