CVE-2023-6399 : A format string vulnerability in Zyxel ATP series firmware versions from 4.32 th

A format string vulnerability in Zyxel ATP series firmware versions from 4.32 through 5.37 Patch 1, USG FLEX series firmware versions from 4.50 through 5.37 Patch 1, USG FLEX 50(W) series firmware versions from 4.16 through 5.37 Patch 1, USG20(W)-VPN series firmware versions from 4.16 through 5.37 Patch 1, and USG FLEX H series firmware versions from 1.10 through 1.10 Patch 1 could allow an authenticated IPSec VPN user to cause DoS conditions against the “deviceid” daemon by sending a crafted hostname to an affected device if it has the “Device Insight” feature enabled.

Published 2024-02-20 02:15:49

Updated 2025-01-21 18:36:34

Source Zyxel Corporation

View at NVD, CVE.org

Vulnerability category: Denial of service

Products affected by CVE-2023-6399

Zyxel » Atp200 Firmware
Versions from including (>=) 5.10 and before (<) 5.37
cpe:2.3:o:zyxel:atp200_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Zyxel » Atp200 » Version: N/A
Zyxel » Atp200 Firmware » Version: 5.37
cpe:2.3:o:zyxel:atp200_firmware:5.37:-:*:*:*:*:*:*
Matching versions
When used together with: Zyxel » Atp200 » Version: N/A
Zyxel » Atp200 Firmware » Version: 5.37 Update Patch1
cpe:2.3:o:zyxel:atp200_firmware:5.37:patch1:*:*:*:*:*:*
Matching versions
When used together with: Zyxel » Atp200 » Version: N/A
Zyxel » Atp500 Firmware
Versions from including (>=) 5.10 and before (<) 5.37
cpe:2.3:o:zyxel:atp500_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Zyxel » Atp500 » Version: N/A
Zyxel » Atp500 Firmware » Version: 5.37
cpe:2.3:o:zyxel:atp500_firmware:5.37:-:*:*:*:*:*:*
Matching versions
When used together with: Zyxel » Atp500 » Version: N/A
Zyxel » Atp500 Firmware » Version: 5.37 Update Patch1
cpe:2.3:o:zyxel:atp500_firmware:5.37:patch1:*:*:*:*:*:*
Matching versions
When used together with: Zyxel » Atp500 » Version: N/A
Zyxel » Atp800 Firmware
Versions from including (>=) 5.10 and before (<) 5.37
cpe:2.3:o:zyxel:atp800_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Zyxel » Atp800 » Version: N/A
Zyxel » Atp800 Firmware » Version: 5.37
cpe:2.3:o:zyxel:atp800_firmware:5.37:-:*:*:*:*:*:*
Matching versions
When used together with: Zyxel » Atp800 » Version: N/A
Zyxel » Atp800 Firmware » Version: 5.37 Update Patch1
cpe:2.3:o:zyxel:atp800_firmware:5.37:patch1:*:*:*:*:*:*
Matching versions
When used together with: Zyxel » Atp800 » Version: N/A
Zyxel » Usg20-vpn Firmware
Versions from including (>=) 5.10 and before (<) 5.37
cpe:2.3:o:zyxel:usg20-vpn_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Zyxel » Usg20-vpn » Version: N/A
Zyxel » Usg20-vpn Firmware » Version: 5.37
cpe:2.3:o:zyxel:usg20-vpn_firmware:5.37:-:*:*:*:*:*:*
Matching versions
When used together with: Zyxel » Usg20-vpn » Version: N/A
Zyxel » Usg20-vpn Firmware » Version: 5.37 Update Patch1
cpe:2.3:o:zyxel:usg20-vpn_firmware:5.37:patch1:*:*:*:*:*:*
Matching versions
When used together with: Zyxel » Usg20-vpn » Version: N/A
Zyxel » Usg20w-vpn Firmware
Versions from including (>=) 5.10 and before (<) 5.37
cpe:2.3:o:zyxel:usg20w-vpn_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Zyxel » Usg20w-vpn » Version: N/A
Zyxel » Usg20w-vpn Firmware » Version: 5.37
cpe:2.3:o:zyxel:usg20w-vpn_firmware:5.37:-:*:*:*:*:*:*
Matching versions
When used together with: Zyxel » Usg20w-vpn » Version: N/A
Zyxel » Usg20w-vpn Firmware » Version: 5.37 Update Patch1
cpe:2.3:o:zyxel:usg20w-vpn_firmware:5.37:patch1:*:*:*:*:*:*
Matching versions
When used together with: Zyxel » Usg20w-vpn » Version: N/A
Zyxel » Atp100 Firmware
Versions from including (>=) 5.10 and before (<) 5.37
cpe:2.3:o:zyxel:atp100_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Zyxel » Atp100 » Version: N/A
Zyxel » Atp100 Firmware » Version: 5.37
cpe:2.3:o:zyxel:atp100_firmware:5.37:-:*:*:*:*:*:*
Matching versions
When used together with: Zyxel » Atp100 » Version: N/A
Zyxel » Atp100 Firmware » Version: 5.37 Update Patch1
cpe:2.3:o:zyxel:atp100_firmware:5.37:patch1:*:*:*:*:*:*
Matching versions
When used together with: Zyxel » Atp100 » Version: N/A
Zyxel » Usg Flex 100 Firmware
Versions from including (>=) 5.10 and before (<) 5.37
cpe:2.3:o:zyxel:usg_flex_100_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Zyxel » Usg Flex 100 » Version: N/A
Zyxel » Usg Flex 100 Firmware » Version: 5.37
cpe:2.3:o:zyxel:usg_flex_100_firmware:5.37:-:*:*:*:*:*:*
Matching versions
When used together with: Zyxel » Usg Flex 100 » Version: N/A
Zyxel » Usg Flex 100 Firmware » Version: 5.37 Update Patch1
cpe:2.3:o:zyxel:usg_flex_100_firmware:5.37:patch1:*:*:*:*:*:*
Matching versions
When used together with: Zyxel » Usg Flex 100 » Version: N/A
Zyxel » Usg Flex 200 Firmware
Versions from including (>=) 5.10 and before (<) 5.37
cpe:2.3:o:zyxel:usg_flex_200_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Zyxel » Usg Flex 200 » Version: N/A
Zyxel » Usg Flex 200 Firmware » Version: 5.37
cpe:2.3:o:zyxel:usg_flex_200_firmware:5.37:-:*:*:*:*:*:*
Matching versions
When used together with: Zyxel » Usg Flex 200 » Version: N/A
Zyxel » Usg Flex 200 Firmware » Version: 5.37 Update Patch1
cpe:2.3:o:zyxel:usg_flex_200_firmware:5.37:patch1:*:*:*:*:*:*
Matching versions
When used together with: Zyxel » Usg Flex 200 » Version: N/A
Zyxel » Usg Flex 500 Firmware
Versions from including (>=) 5.10 and before (<) 5.37
cpe:2.3:o:zyxel:usg_flex_500_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Zyxel » Usg Flex 500 » Version: N/A
Zyxel » Usg Flex 500 Firmware » Version: 5.37
cpe:2.3:o:zyxel:usg_flex_500_firmware:5.37:-:*:*:*:*:*:*
Matching versions
When used together with: Zyxel » Usg Flex 500 » Version: N/A
Zyxel » Usg Flex 500 Firmware » Version: 5.37 Update Patch1
cpe:2.3:o:zyxel:usg_flex_500_firmware:5.37:patch1:*:*:*:*:*:*
Matching versions
When used together with: Zyxel » Usg Flex 500 » Version: N/A
Zyxel » Usg Flex 100w Firmware
Versions from including (>=) 5.10 and before (<) 5.37
cpe:2.3:o:zyxel:usg_flex_100w_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Zyxel » Usg Flex 100w » Version: N/A
Zyxel » Usg Flex 100w Firmware » Version: 5.37
cpe:2.3:o:zyxel:usg_flex_100w_firmware:5.37:-:*:*:*:*:*:*
Matching versions
When used together with: Zyxel » Usg Flex 100w » Version: N/A
Zyxel » Usg Flex 100w Firmware » Version: 5.37 Update Patch1
cpe:2.3:o:zyxel:usg_flex_100w_firmware:5.37:patch1:*:*:*:*:*:*
Matching versions
When used together with: Zyxel » Usg Flex 100w » Version: N/A
Zyxel » Usg Flex 700 Firmware
Versions from including (>=) 5.10 and before (<) 5.37
cpe:2.3:o:zyxel:usg_flex_700_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Zyxel » Usg Flex 700 » Version: N/A
Zyxel » Usg Flex 700 Firmware » Version: 5.37
cpe:2.3:o:zyxel:usg_flex_700_firmware:5.37:-:*:*:*:*:*:*
Matching versions
When used together with: Zyxel » Usg Flex 700 » Version: N/A
Zyxel » Usg Flex 700 Firmware » Version: 5.37 Update Patch1
cpe:2.3:o:zyxel:usg_flex_700_firmware:5.37:patch1:*:*:*:*:*:*
Matching versions
When used together with: Zyxel » Usg Flex 700 » Version: N/A
Zyxel » Atp100w Firmware
Versions from including (>=) 5.10 and before (<) 5.37
cpe:2.3:o:zyxel:atp100w_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Zyxel » Atp100w » Version: N/A
Zyxel » Atp100w Firmware » Version: 5.37
cpe:2.3:o:zyxel:atp100w_firmware:5.37:-:*:*:*:*:*:*
Matching versions
When used together with: Zyxel » Atp100w » Version: N/A
Zyxel » Atp100w Firmware » Version: 5.37 Update Patch1
cpe:2.3:o:zyxel:atp100w_firmware:5.37:patch1:*:*:*:*:*:*
Matching versions
When used together with: Zyxel » Atp100w » Version: N/A
Zyxel » Atp700 Firmware
Versions from including (>=) 5.10 and before (<) 5.37
cpe:2.3:o:zyxel:atp700_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Zyxel » Atp700 » Version: N/A
Zyxel » Atp700 Firmware » Version: 5.37
cpe:2.3:o:zyxel:atp700_firmware:5.37:-:*:*:*:*:*:*
Matching versions
When used together with: Zyxel » Atp700 » Version: N/A
Zyxel » Atp700 Firmware » Version: 5.37 Update Patch1
cpe:2.3:o:zyxel:atp700_firmware:5.37:patch1:*:*:*:*:*:*
Matching versions
When used together with: Zyxel » Atp700 » Version: N/A
Zyxel » Usg Flex 50w Firmware
Versions from including (>=) 5.10 and before (<) 5.37
cpe:2.3:o:zyxel:usg_flex_50w_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Zyxel » Usg Flex 50w » Version: N/A
Zyxel » Usg Flex 50w Firmware » Version: 5.37
cpe:2.3:o:zyxel:usg_flex_50w_firmware:5.37:-:*:*:*:*:*:*
Matching versions
When used together with: Zyxel » Usg Flex 50w » Version: N/A
Zyxel » Usg Flex 50w Firmware » Version: 5.37 Update Patch1
cpe:2.3:o:zyxel:usg_flex_50w_firmware:5.37:patch1:*:*:*:*:*:*
Matching versions
When used together with: Zyxel » Usg Flex 50w » Version: N/A
Zyxel » Usg Flex 50 Firmware
Versions from including (>=) 5.10 and before (<) 5.37
cpe:2.3:o:zyxel:usg_flex_50_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Zyxel » Usg Flex 50 » Version: N/A
Zyxel » Usg Flex 50 Firmware » Version: 5.37
cpe:2.3:o:zyxel:usg_flex_50_firmware:5.37:-:*:*:*:*:*:*
Matching versions
When used together with: Zyxel » Usg Flex 50 » Version: N/A
Zyxel » Usg Flex 50 Firmware » Version: 5.37 Update Patch1
cpe:2.3:o:zyxel:usg_flex_50_firmware:5.37:patch1:*:*:*:*:*:*
Matching versions
When used together with: Zyxel » Usg Flex 50 » Version: N/A
Zyxel » UOS » Version: 1.10
cpe:2.3:o:zyxel:uos:1.10:-:*:*:*:*:*:*
Matching versions
When used together with: Zyxel » Usg Flex 100h » Version: N/A
When used together with: Zyxel » Usg Flex 100hp » Version: N/A
When used together with: Zyxel » Usg Flex 200h » Version: N/A
When used together with: Zyxel » Usg Flex 200hp » Version: N/A
When used together with: Zyxel » Usg Flex 500h » Version: N/A
When used together with: Zyxel » Usg Flex 700h » Version: N/A
Zyxel » UOS » Version: 1.10 Update Patch1
cpe:2.3:o:zyxel:uos:1.10:patch1:*:*:*:*:*:*
Matching versions
When used together with: Zyxel » Usg Flex 100h » Version: N/A
When used together with: Zyxel » Usg Flex 100hp » Version: N/A
When used together with: Zyxel » Usg Flex 200h » Version: N/A
When used together with: Zyxel » Usg Flex 200hp » Version: N/A
When used together with: Zyxel » Usg Flex 500h » Version: N/A
When used together with: Zyxel » Usg Flex 700h » Version: N/A
Zyxel » Usg Flex 100ax Firmware
Versions from including (>=) 5.10 and before (<) 5.37
cpe:2.3:o:zyxel:usg_flex_100ax_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Zyxel » Usg Flex 100ax » Version: N/A
Zyxel » Usg Flex 100ax Firmware » Version: 5.37
cpe:2.3:o:zyxel:usg_flex_100ax_firmware:5.37:-:*:*:*:*:*:*
Matching versions
When used together with: Zyxel » Usg Flex 100ax » Version: N/A
Zyxel » Usg Flex 100ax Firmware » Version: 5.37 Update Patch1
cpe:2.3:o:zyxel:usg_flex_100ax_firmware:5.37:patch1:*:*:*:*:*:*
Matching versions
When used together with: Zyxel » Usg Flex 100ax » Version: N/A
Zyxel » Usg Flex 100h Firmware
Versions from including (>=) 5.10 and before (<) 5.37
cpe:2.3:o:zyxel:usg_flex_100h_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Zyxel » Usg Flex 100h » Version: N/A
Zyxel » Usg Flex 100h Firmware » Version: 5.37
cpe:2.3:o:zyxel:usg_flex_100h_firmware:5.37:-:*:*:*:*:*:*
Matching versions
When used together with: Zyxel » Usg Flex 100h » Version: N/A
Zyxel » Usg Flex 100h Firmware » Version: 5.37 Update Patch1
cpe:2.3:o:zyxel:usg_flex_100h_firmware:5.37:patch1:*:*:*:*:*:*
Matching versions
When used together with: Zyxel » Usg Flex 100h » Version: N/A
Zyxel » Usg Flex 200h Firmware
Versions from including (>=) 5.10 and before (<) 5.37
cpe:2.3:o:zyxel:usg_flex_200h_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Zyxel » Usg Flex 200h » Version: N/A
Zyxel » Usg Flex 200h Firmware » Version: 5.37
cpe:2.3:o:zyxel:usg_flex_200h_firmware:5.37:-:*:*:*:*:*:*
Matching versions
When used together with: Zyxel » Usg Flex 200h » Version: N/A
Zyxel » Usg Flex 200h Firmware » Version: 5.37 Update Patch1
cpe:2.3:o:zyxel:usg_flex_200h_firmware:5.37:patch1:*:*:*:*:*:*
Matching versions
When used together with: Zyxel » Usg Flex 200h » Version: N/A
Zyxel » Usg Flex 200hp Firmware
Versions from including (>=) 5.10 and before (<) 5.37
cpe:2.3:o:zyxel:usg_flex_200hp_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Zyxel » Usg Flex 200hp » Version: N/A
Zyxel » Usg Flex 200hp Firmware » Version: 5.37
cpe:2.3:o:zyxel:usg_flex_200hp_firmware:5.37:-:*:*:*:*:*:*
Matching versions
When used together with: Zyxel » Usg Flex 200hp » Version: N/A
Zyxel » Usg Flex 200hp Firmware » Version: 5.37 Update Patch1
cpe:2.3:o:zyxel:usg_flex_200hp_firmware:5.37:patch1:*:*:*:*:*:*
Matching versions
When used together with: Zyxel » Usg Flex 200hp » Version: N/A
Zyxel » Usg Flex 500h Firmware
Versions from including (>=) 5.10 and before (<) 5.37
cpe:2.3:o:zyxel:usg_flex_500h_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Zyxel » Usg Flex 500h » Version: N/A
Zyxel » Usg Flex 500h Firmware » Version: 5.37
cpe:2.3:o:zyxel:usg_flex_500h_firmware:5.37:-:*:*:*:*:*:*
Matching versions
When used together with: Zyxel » Usg Flex 500h » Version: N/A
Zyxel » Usg Flex 500h Firmware » Version: 5.37 Update Patch1
cpe:2.3:o:zyxel:usg_flex_500h_firmware:5.37:patch1:*:*:*:*:*:*
Matching versions
When used together with: Zyxel » Usg Flex 500h » Version: N/A
Zyxel » Usg Flex 700h Firmware
Versions from including (>=) 5.10 and before (<) 5.37
cpe:2.3:o:zyxel:usg_flex_700h_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Zyxel » Usg Flex 700h » Version: N/A
Zyxel » Usg Flex 700h Firmware » Version: 5.37
cpe:2.3:o:zyxel:usg_flex_700h_firmware:5.37:-:*:*:*:*:*:*
Matching versions
When used together with: Zyxel » Usg Flex 700h » Version: N/A
Zyxel » Usg Flex 700h Firmware » Version: 5.37 Update Patch1
cpe:2.3:o:zyxel:usg_flex_700h_firmware:5.37:patch1:*:*:*:*:*:*
Matching versions
When used together with: Zyxel » Usg Flex 700h » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2023-6399

EPSS FAQ

0.31%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 53 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2023-6399

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
6.5	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	2.8	3.6	NIST	2025-01-21
Attack Vector: Network Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: None Integrity: None Availability: High
5.7	MEDIUM	CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	2.1	3.6	Zyxel Corporation	2024-02-20
Attack Vector: Adjacent Network Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: None Integrity: None Availability: High

CWE ids for CVE-2023-6399

CWE-134 Use of Externally-Controlled Format String

The product uses a function that accepts a format string as an argument, but the format string originates from an external source.

Assigned by: security@zyxel.com.tw (Secondary)

References for CVE-2023-6399

https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-multiple-vulnerabilities-in-firewalls-and-aps-02-20-2024

Zyxel security advisory for multiple vulnerabilities in firewalls and APs | Zyxel Networks
Vendor Advisory

CVEs referencing this url

Jump to

Vulnerability Details : CVE-2023-6399

Products affected by CVE-2023-6399

Exploit prediction scoring system (EPSS) score for CVE-2023-6399

CVSS scores for CVE-2023-6399

CWE ids for CVE-2023-6399

References for CVE-2023-6399