PT-2023-7249 · Zyxel · Zyxel Atp Series+4

Christopher Leech · Published 2023-06-14 · Updated 2023-12-04 · CVE-2023-35139

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Zyxel ATP series versions 5.10 through 5.37 Zyxel USG FLEX series versions 5.00 through 5.37 Zyxel USG FLEX 50(W) series versions 5.10 through 5.37 Zyxel USG20(W)-VPN series versions 5.10 through 5.37 Zyxel VPN series versions 5.00 through 5.37

Description A cross-site scripting (XSS) vulnerability in the CGI program could allow an unauthenticated LAN-based attacker to store malicious scripts in a vulnerable device. A successful XSS attack could result in the stored malicious scripts being executed to steal cookies when the user visits the specific CGI used for dumping ZTP logs. The vulnerability is related to the lack of protection of the web page structure, which could allow a remote attacker to conduct cross-site scripting attacks and gain unauthorized access to protected information.

Recommendations For Zyxel ATP series versions 5.10 through 5.37, update to a version that includes a fix for this issue. For Zyxel USG FLEX series versions 5.00 through 5.37, update to a version that includes a fix for this issue. For Zyxel USG FLEX 50(W) series versions 5.10 through 5.37, update to a version that includes a fix for this issue. For Zyxel USG20(W)-VPN series versions 5.10 through 5.37, update to a version that includes a fix for this issue. For Zyxel VPN series versions 5.00 through 5.37, update to a version that includes a fix for this issue. As a temporary workaround, consider disabling the CGI program used for dumping ZTP logs until a patch is available. Restrict access to the vulnerable CGI interface to minimize the risk of exploitation. Avoid using the vulnerable device until the issue is resolved.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

BDU:2023-08277

CVE-2023-35139

Affected Products

Zyxel Atp Series

Zyxel Usg Flex 50(W) Series

Zyxel Usg Flex Series

Zyxel Usg20(W)-Vpn Series

Zyxel Vpn Series

References · 7

• https://bdu.fstec.ru/vul/2023-08277 · Security Note
• https://zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-multiple-vulnerabilities-in-firewalls-and-aps · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-35139 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-35139 · Security Note
• https://t.me/cvenotify/61291 · Telegram Post
• https://vuldb.com/?id.246245 · Note
• https://t.me/cvenotify/62158 · Telegram Post