{"timestamp":"2025-02-04T16:37:35.614852Z","id":"CVE-2023-22916","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}

[{"vendor":"Zyxel","product":"ATP series firmware","versions":[{"version":"5.10 through 5.35","status":"affected"}]},{"vendor":"Zyxel","product":"USG FLEX series firmware","versions":[{"version":"5.00 through 5.35","status":"affected"}]},{"vendor":"Zyxel","product":"USG FLEX 50(W) firmware","versions":[{"version":"5.10 through 5.35","status":"affected"}]},{"vendor":"Zyxel","product":"USG20(W)-VPN firmware","versions":[{"version":"5.10 through 5.35","status":"affected"}]},{"vendor":"Zyxel","product":"VPN series firmware","versions":[{"version":"5.00 through 5.35","status":"affected"}]}]

https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-multiple-vulnerabilities-of-firewalls-and-aps

NIST AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H

NIST NVD-CWE-noinfo

AND
     OR
          *cpe:2.3:o:zyxel:atp100_firmware:*:*:*:*:*:*:*:* versions from (including) 5.10 up to (including) 5.35
     OR
          cpe:2.3:h:zyxel:atp100:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:zyxel:atp100w_firmware:*:*:*:*:*:*:*:* versions from (including) 5.10 up to (including) 5.35
     OR
          cpe:2.3:h:zyxel:atp100w:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:zyxel:atp200_firmware:*:*:*:*:*:*:*:* versions from (including) 5.10 up to (including) 5.35
     OR
          cpe:2.3:h:zyxel:atp200:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:zyxel:atp500_firmware:*:*:*:*:*:*:*:* versions from (including) 5.10 up to (including) 5.35
     OR
          cpe:2.3:h:zyxel:atp500:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:zyxel:atp700_firmware:*:*:*:*:*:*:*:* versions from (including) 5.10 up to (including) 5.35
     OR
          cpe:2.3:h:zyxel:atp700:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:zyxel:atp800_firmware:*:*:*:*:*:*:*:* versions from (including) 5.10 up to (including) 5.35
     OR
          cpe:2.3:h:zyxel:atp800:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:zyxel:usg_20w-vpn_firmware:*:*:*:*:*:*:*:* versions from (including) 5.10 up to (including) 5.35
     OR
          cpe:2.3:h:zyxel:usg_20w-vpn:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:zyxel:usg_flex_100_firmware:*:*:*:*:*:*:*:* versions from (including) 5.00 up to (including) 5.35
     OR
          cpe:2.3:h:zyxel:usg_flex_100:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:zyxel:usg_flex_100w_firmware:*:*:*:*:*:*:*:* versions from (including) 5.00 up to (including) 5.35
     OR
          cpe:2.3:h:zyxel:usg_flex_100w:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:zyxel:usg_flex_200_firmware:*:*:*:*:*:*:*:* versions from (including) 5.00 up to (including) 5.35
     OR
          cpe:2.3:h:zyxel:usg_flex_200:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:zyxel:usg_flex_500_firmware:*:*:*:*:*:*:*:* versions from (including) 5.00 up to (including) 5.35
     OR
          cpe:2.3:h:zyxel:usg_flex_500:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:zyxel:usg_flex_50_firmware:*:*:*:*:*:*:*:* versions from (including) 5.00 up to (including) 5.35
     OR
          cpe:2.3:h:zyxel:usg_flex_50:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:zyxel:usg_flex_50w_firmware:*:*:*:*:*:*:*:* versions from (including) 5.10 up to (including) 5.35
     OR
          cpe:2.3:h:zyxel:usg_flex_50w:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:zyxel:usg_flex_700_firmware:*:*:*:*:*:*:*:* versions from (including) 5.00 up to (including) 5.35
     OR
          cpe:2.3:h:zyxel:usg_flex_700:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:zyxel:vpn1000_firmware:*:*:*:*:*:*:*:* versions from (including) 5.00 up to (including) 5.35
     OR
          cpe:2.3:h:zyxel:vpn1000:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:zyxel:vpn100_firmware:*:*:*:*:*:*:*:* versions from (including) 5.00 up to (including) 5.35
     OR
          cpe:2.3:h:zyxel:vpn100:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:zyxel:vpn300_firmware:*:*:*:*:*:*:*:* versions from (including) 5.00 up to (including) 5.35
     OR
          cpe:2.3:h:zyxel:vpn300:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:zyxel:vpn50_firmware:*:*:*:*:*:*:*:* versions from (including) 5.00 up to (including) 5.35
     OR
          cpe:2.3:h:zyxel:vpn50:-:*:*:*:*:*:*:*

https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-multiple-vulnerabilities-of-firewalls-and-aps No Types Assigned

https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-multiple-vulnerabilities-of-firewalls-and-aps Vendor Advisory