CRITICAL: CVE-2023-33010 actively exploited — zyxel atp100 firmware

CVE: CVE-2023-33010

CVSS: 9.8 (3.1) — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Severity: CRITICAL

Status: ✅ Confirmed exploited in the wild (CISA KEV)

Affected

• zyxel atp100 firmware
• zyxel atp100
• zyxel atp200 firmware
• zyxel atp200
• zyxel atp500 firmware

Summary

A buffer overflow vulnerability in the ID processing function in Zyxel ATP series firmware versions 4.32 through 5.36 Patch 1, USG FLEX series firmware versions 4.50 through 5.36 Patch 1, USG FLEX 50(W) firmware versions 4.25 through 5.36 Patch 1, USG20(W)-VPN firmware versions 4.25 through 5.36 Patch 1, VPN series firmware versions 4.30 through 5.36 Patch 1, ZyWALL/USG series firmware versions 4.25 through 4.73 Patch 1, could allow an unauthenticated attacker to cause denial-of-service (DoS) conditions and even a remote code execution on an affected device.

Verified Sources

• NVD entry
• GitHub Advisory
• MITRE
• CISA Known Exploited Vulnerabilities Catalog

References

• https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-multiple-buffer-overflow-vulnerabilities-of-firewalls
• https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-multiple-buffer-overflow-vulnerabilities-of-firewalls
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-33010

_Validated by the Lyrie Threat Intelligence Pipeline — 3 independent sources confirmed before publication. No speculation._