47
CVE-2023-6397
—CVSS 3.1
5.3 medium
EPSS
<1%p23
Published
()
Modified
Description
A null pointer dereference vulnerability in Zyxel ATP series firmware versions from 4.32 through 5.37 Patch 1 and USG FLEX series firmware versions from 4.50 through 5.37 Patch 1 could allow a LAN-based attacker to cause denial-of-service (DoS) conditions by downloading a crafted RAR compressed file onto a LAN-side host if the firewall has the “Anti-Malware” feature enabled.
- Vendors
- zyxel
- Products
- atp100 firmware, atp100w firmware, atp200 firmware, atp500 firmware, atp700 firmware, atp800 firmware, usg flex 100 firmware, usg flex 100ax firmware, usg flex 100h firmware, usg flex 100w firmware, usg flex 200 firmware, usg flex 200h firmware
- Weakness
- CWE-476
- Vector
- CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H