Skip to main content

Zld CVE-2023-37925

MEDIUM
Improper Privilege Management (CWE-269)
2023-11-28 security@zyxel.com.tw
Privilege Escalation Zyxel Zld Nwa110Ax Firmware Nwa1123Acv3 Firmware Nwa210Ax Firmware Nwa220Ax 6E Firmware Nwa50Ax Firmware Nwa50Ax Pro Firmware Nwa55Axe Firmware Nwa90Ax Firmware Nwa90Ax Pro Firmware Wac500 Firmware Wac500H Firmware Wax510D Firmware Wax610D Firmware Wax620D 6E Firmware Wax630S Firmware Wax640S 6E Firmware Wax650S Firmware Wax655E Firmware Wbe660S Firmware
5.5
CVSS 3.1 · Vendor: zyxel
Share

Severity by source

Vendor (zyxel) PRIMARY
5.5 MEDIUM
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Primary rating from Vendor (zyxel) · only source for this CVE.

CVSS VectorVendor: zyxel

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
None

Lifecycle Timeline

1
CVE Published
Nov 28, 2023 - 02:15 cve.org
MEDIUM 5.5

DescriptionCVE.org

An improper privilege management vulnerability in the debug CLI command of the Zyxel ATP series firmware versions 4.32 through 5.37, USG FLEX series firmware versions 4.50 through 5.37, USG FLEX 50(W) series firmware versions 4.16 through 5.37, USG20(W)-VPN series firmware versions 4.16 through 5.37, VPN series firmware versions 4.30 through 5.37, NWA50AX firmware version 6.29(ABYW.2), WAC500 firmware version 6.65(ABVS.1), WAX300H firmware version 6.60(ACHF.1), and WBE660S firmware version 6.65(ACGG.1), could allow an authenticated local attacker to access system files on an affected device.

AnalysisAI

An improper privilege management vulnerability in the debug CLI command of the Zyxel ATP series firmware versions 4.32 through 5.37, USG FLEX series firmware versions 4.50 through 5.37, USG FLEX. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified as Improper Privilege Management (CWE-269), which allows attackers to escalate privileges to gain unauthorized elevated access. An improper privilege management vulnerability in the debug CLI command of the Zyxel ATP series firmware versions 4.32 through 5.37, USG FLEX series firmware versions 4.50 through 5.37, USG FLEX 50(W) series firmware versions 4.16 through 5.37, USG20(W)-VPN series firmware versions 4.16 through 5.37, VPN series firmware versions 4.30 through 5.37, NWA50AX firmware version 6.29(ABYW.2), WAC500 firmware version 6.65(ABVS.1), WAX300H firmware version 6.60(ACHF.1), and WBE660S firmware version 6.65(ACGG.1), could allow an authenticated local attacker to access system files on an affected device. Affected products include: Zyxel Zld, Zyxel Nwa110Ax Firmware, Zyxel Nwa1123Acv3 Firmware, Zyxel Nwa210Ax Firmware, Zyxel Nwa220Ax-6E Firmware. Version information: through 5.37.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply principle of least privilege, validate privilege transitions, implement proper role separation.

More in Zld

View all
CVE-2024-11667 CRITICAL
9.8 Nov 27

A directory traversal vulnerability in the web management interface of Zyxel ATP series firmware versions V5.00 through

CVE-2020-25014 CRITICAL
9.8 Nov 27

A stack-based buffer overflow in fbwifi_continue.cgi on Zyxel UTM and VPN series of gateways running firmware version V4
CVE-2024-42057 HIGH
8.1 Sep 03

A command injection vulnerability in the IPSec VPN feature of Zyxel ATP series firmware versions from V4.32 through V5.3
CVE-2024-42058 HIGH
7.5 Sep 03

A null pointer dereference vulnerability in Zyxel ATP series firmware versions from V4.32 through V5.38, USG FLEX series
CVE-2023-4398 HIGH
7.5 Nov 28

An integer overflow vulnerability in the source code of the QuickSec IPSec toolkit used in the VPN feature of the Zyxel

CVE-2024-7203 HIGH
7.2 Sep 03

A post-authentication command injection vulnerability in Zyxel ATP series firmware versions from V4.60 through V5.38 and
CVE-2024-42060 HIGH
7.2 Sep 03

A post-authentication command injection vulnerability in Zyxel ATP series firmware versions from V4.32 through V5.38, US
CVE-2024-42059 HIGH
7.2 Sep 03

A post-authentication command injection vulnerability in Zyxel ATP series firmware versions from V5.00 through V5.38, US
CVE-2020-29299 HIGH
7.2 Dec 27

Certain Zyxel products allow command injection by an admin via an input string to chg_exp_pwd during a password-change a
CVE-2024-42061 MEDIUM
6.1 Sep 03

A reflected cross-site scripting (XSS) vulnerability in the CGI program "dynamic_script.cgi" of Zyxel ATP series firmwar
CVE-2023-35139 MEDIUM
6.1 Nov 28

A cross-site scripting (XSS) vulnerability in the CGI program of the Zyxel ATP series firmware versions 5.10 through 5.3
CVE-2023-5960 MEDIUM
5.5 Nov 28

An improper privilege management vulnerability in the hotspot feature of the Zyxel USG FLEX series firmware versions 4.5

Same weakness CWE-269 – Improper Privilege Management

View all
CVE-2017-5689 CRITICAL POC
9.8
CVE-2017-12635 CRITICAL POC
9.8
CVE-2012-3993 CRITICAL POC
9.3
CVE-2017-11467 CRITICAL POC
9.8
CVE-2014-1510 CRITICAL POC
9.8
CVE-2014-1511 CRITICAL POC
9.8
CVE-2016-0151 HIGH POC
7.8
CVE-2013-0643 HIGH
8.8

Same technique Privilege Escalation

View all
CVE-2025-47812 CRITICAL POC
10.0
CVE-2013-0422 CRITICAL POC
9.8
CVE-2013-0632 CRITICAL POC
9.8
CVE-2017-5689 CRITICAL POC
9.8
CVE-2017-12635 CRITICAL POC
9.8
CVE-2016-10372 CRITICAL POC
9.8
CVE-2014-9583 CRITICAL POC
10.0
CVE-2012-0297 CRITICAL POC
10.0

Share

CVE-2023-37925 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy