A buffer overflow vulnerability in the “sdwan_iface_ipc” binary of Zyxel ATP series firmware versions 5.10 through 5.32, USG FLEX series firmware versions 5.00 through 5.32, USG FLEX 50(W) firmware versions 5.10 through 5.32, USG20(W)-VPN firmware versions 5.10 through 5.32, and VPN series firmware versions 5.00 through 5.35, which could allow a remote unauthenticated attacker to cause a core dump with a request error message on a vulnerable device by uploading a crafted configuration file.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
ATP series firmware
Vendor
Zyxel
Product
ATP series firmware
Platforms
Unknown
Default status
Unknown
ATP series firmware · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
5.10 through 5.32
affected
Unavailable
Unavailable
Unavailable
None listed
USG FLEX series firmware
Vendor
Zyxel
Product
USG FLEX series firmware
Platforms
Unknown
Default status
Unknown
USG FLEX series firmware · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
5.00 through 5.32
affected
Unavailable
Unavailable
Unavailable
None listed
USG FLEX 50(W) firmware
Vendor
Zyxel
Product
USG FLEX 50(W) firmware
Platforms
Unknown
Default status
Unknown
USG FLEX 50(W) firmware · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
5.10 through 5.32
affected
Unavailable
Unavailable
Unavailable
None listed
USG20(W)-VPN firmware
Vendor
Zyxel
Product
USG20(W)-VPN firmware
Platforms
Unknown
Default status
Unknown
USG20(W)-VPN firmware · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
5.10 through 5.32
affected
Unavailable
Unavailable
Unavailable
None listed
VPN series firmware
Vendor
Zyxel
Product
VPN series firmware
Platforms
Unknown
Default status
Unknown
VPN series firmware · Scoped product and version facts