PT-2023-7186 · Zyxel · Zyxel Atp Series+5

Atdog + 1 · Published 2023-11-27 · Updated 2023-12-04 · CVE-2023-4398

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Zyxel ATP series firmware versions 4.32 through 5.37 Zyxel USG FLEX series firmware versions 4.50 through 5.37 Zyxel USG FLEX 50(W) series firmware versions 4.16 through 5.37 Zyxel USG20(W)-VPN series firmware versions 4.16 through 5.37 Zyxel VPN series firmware versions 4.30 through 5.37

Description The issue is related to an integer overflow vulnerability in the QuickSec IPSec toolkit used in the VPN feature of various Zyxel devices. This vulnerability could allow an unauthenticated attacker to cause denial-of-service (DoS) conditions on an affected device by sending a crafted IKE packet.

Recommendations For Zyxel ATP series firmware versions 4.32 through 5.37, update to a version that fixes the integer overflow vulnerability in the QuickSec IPSec toolkit. For Zyxel USG FLEX series firmware versions 4.50 through 5.37, update to a version that fixes the integer overflow vulnerability in the QuickSec IPSec toolkit. For Zyxel USG FLEX 50(W) series firmware versions 4.16 through 5.37, update to a version that fixes the integer overflow vulnerability in the QuickSec IPSec toolkit. For Zyxel USG20(W)-VPN series firmware versions 4.16 through 5.37, update to a version that fixes the integer overflow vulnerability in the QuickSec IPSec toolkit. For Zyxel VPN series firmware versions 4.30 through 5.37, update to a version that fixes the integer overflow vulnerability in the QuickSec IPSec toolkit. As a temporary workaround, consider restricting access to the IKE packet handling functionality until a patch is available.

Fix

Integer Overflow

Weakness Enumeration

CWE-190

Related Identifiers

BDU:2023-08213

CVE-2023-4398

Affected Products

Quicksec Ipsec Toolkit

Zyxel Atp Series

Zyxel Usg Flex 50(W) Series

Zyxel Usg Flex Series

Zyxel Usg20(W)-Vpn Series

Zyxel Vpn Series

References · 6

• https://bdu.fstec.ru/vul/2023-08213 · Security Note
• https://zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-multiple-vulnerabilities-in-firewalls-and-aps · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-4398 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-4398 · Security Note
• https://zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-multiple-vulnerabilities-in-firewalls-and-aps?cve=title · Note
• https://t.me/cvenotify/61296 · Telegram Post