CVE-2023-33012

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

A command injection vulnerability in the configuration parser of the Zyxel ATP series firmware versions 5.10 through 5.36 Patch 2, USG FLEX series firmware versions 5.00 through 5.36 Patch 2, USG FLEX 50(W) series firmware versions 5.10 through 5.36 Patch 2, USG20(W)-VPN series firmware versions 5.10 through 5.36 Patch 2, and VPN series firmware versions 5.00 through 5.36 Patch 2, could allow an unauthenticated, LAN-based attacker to execute some OS commands by using a crafted GRE configuration when the cloud management mode is enabled.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-78

Affected software

No affected versions have been published.

Timeline

Published: Jul 17, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-330138.8A post-authentication command injection vulnerability in the NTP feature of Zyxel NBG6604 firmware version V1.01(ABIR.1)C0 could allow an au CVE-2023-330146.8Information disclosure in Core services while processing a Diag command.CVE-2023-330157.5Transient DOS in WLAN Firmware while interpreting MBSSID IE of a received beacon frame.CVE-2023-330167.5Transient DOS in WLAN firmware while parsing MLO (multi-link operation).CVE-2023-330177.8Memory corruption in Boot while running a ListVars test in UEFI Menu during boot.CVE-2023-330187.8Memory corruption while using the UIM diag command to get the operators name.CVE-2023-330197.5Transient DOS in WLAN Host while doing channel switch announcement (CSA), when a mobile station receives invalid channel in CSA IE.CVE-2023-33027.8Improper Neutralization of Formula Elements in a CSV File in GitHub repository admidio/admidio prior to 4.2.9.CVE-2023-330207.5Transient DOS in WLAN Host when an invalid channel (like channel out of range) is received in STA during CSA IE.CVE-2023-330217.8Memory corruption in Graphics while processing user packets for command submission.CVE-2023-330227.8Memory corruption in HLOS while invoking IOCTL calls from user-space.CVE-2023-330237.8Memory corruption while processing finish_sign command to pass a rsp buffer.