CVSS 3.1 Score 5.5 of 10 (medium)


Published Nov 28, 2023
Updated: Dec 4, 2023
CWE ID 120


CVE-2023-37926 is a buffer overflow vulnerability found in the firmware versions 4.32 through 5.37 of Zyxel ATP series, versions 4.50 through 5.37 of USG FLEX series, versions 4.16 through 5.37 of USG FLEX 50(W) series, versions 4.16 through 5.37 of USG20(W)-VPN series, and versions 4.30 through 5.37 of VPN series. This vulnerability could be exploited by an authenticated local attacker to cause denial-of-service (DoS) conditions by executing a specific CLI command to dump system logs on the affected device. The risk score is rated at 25, indicating a medium severity level, with low privileges required and no user interaction necessary for exploitation. The impact score is calculated at 3.6 out of a maximum of 10, suggesting a moderate potential danger to organizations using these vulnerable products from Zyxel.


Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2023-37926 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options