PT-2023-22605 · Zyxel · Zyxel Atp Series+3

Fabiano Golluscio · Published 2023-05-29 · Updated 2026-05-15 · CVE-2023-30253

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Dolibarr versions prior to 17.0.1 Zyxel ATP Series, USG FLEX Series, USG FLEX 50(W) Series, and USG20(W)-VPN Series (affected versions not specified)

Description The issue allows remote code execution by an authenticated user via an uppercase manipulation in injected data, such as using <?PHP instead of <?php. This can be exploited in certain Zyxel products, including the ATP Series, USG FLEX Series, USG FLEX 50(W) Series, and USG20(W)-VPN Series, although specific details about the exploitation in these products are not provided.

Recommendations For Dolibarr versions prior to 17.0.1, update to version 17.0.1 or later to resolve the issue. For Zyxel ATP Series, USG FLEX Series, USG FLEX 50(W) Series, and USG20(W)-VPN Series, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

BIT-DOLIBARR-2023-30253

CVE-2023-30253

GHSA-9WQR-5JP4-MJMH

Affected Products

Usg Flex 50(W) Series

Usg Flex H Series

Usg20(W)-Vpn Series

Zyxel Atp Series

References · 19

• 🔥 https://github.com/nikn0laty/Exploit-for-Dolibarr-17.0.0-CVE-2023-30253 · Exploit
• 🔥 https://github.com/Rubikcuv5/cve-2023-30253 · Exploit
• 🔥 https://github.com/dollarboysushil/Dolibarr-17.0.0-Exploit-CVE-2023-30253 · Exploit
• 🔥 https://swascan.com/security-advisory-dolibarr-17-0-0 · Exploit
• https://cve.org/CVERecord?id=CVE-2023-30253 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-30253 · Vendor Advisory
• https://swascan.com/blog · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-30253 · Security Note
• https://osv.dev/vulnerability/CVE-2023-30253 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-9wqr-5jp4-mjmh · Vendor Advisory
• https://osv.dev/vulnerability/BIT-dolibarr-2023-30253 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-30253 · Vendor Advisory
• https://github.com/Dolibarr/dolibarr · Note
• https://twitter.com/F21T21R/status/1841334796011929969 · Twitter Post
• https://twitter.com/m3gakr4nus/status/1833250560633430098 · Twitter Post