CVE-2023-5960

An improper privilege management vulnerability in the hotspot feature of the Zyxel USG FLEX series firmware versions 4.50 through 5.37 and VPN series firmware versions 4.30 through 5.37 could allow an authenticated local attacker to access the system files on an affected device.

Score

CVSS 3.1 5.5 Medium

Status

Modified - security@zyxel.com.tw

Published

2023-11-28

Last modified

2024-08-02

Weaknesses

CWE-269

Affected products

• Usg Flex Series Firmware (Zyxel)
• Vpn Series Firmware (Zyxel)
• Zld (Zyxel)

References

• https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-multiple-vulnerabilities-in-fir…