CVE Watch—

CVE-2023-33010

Zyxel Multiple Firewalls Buffer Overflow Vulnerability

CVSS

—

No CVSS

EPSS

29.0%

p98

KEV

YES

Jun 5, 2023

Exploit Today

0-100

Published: — · Last modified: —

EPSS · 30d

28.8%EPSS · 30 days29.0%

2026-09-162026-10-14

KEV catalog record

Product

Zyxel / Multiple Firewalls

Vulnerability

Zyxel Multiple Firewalls Buffer Overflow Vulnerability

Added to KEV

Jun 5, 2023

Remediate by

Jun 26, 2023

Known ransomware use

Summary description

Zyxel ATP, USG FLEX, USG FLEX 50(W), USG20(W)-VPN, VPN, and ZyWALL/USG firewalls contain a buffer overflow vulnerability in the ID processing function that could allow an unauthenticated attacker to cause denial-of-service (DoS) conditions and remote code execution on an affected device.

Required action

Apply updates per vendor instructions.

Notes

https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-multiple-buffer-overflow-vulnerabilities-of-firewalls; https://nvd.nist.gov/vuln/detail/CVE-2023-33010

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2024-116677.5 HIG

86.8%

KEV—76Zyxel Multiple Firewalls Path Traversal Vulnerability71d CVE-2022-30525—

100.0%

KEV—80Zyxel Multiple Firewalls OS Command Injection Vulnerability—CVE-2023-28771—

99.9%

KEV—80Zyxel Multiple Firewalls OS Command Injection Vulnerability—CVE-2023-33009—

98.1%

KEV—79Zyxel Multiple Firewalls Buffer Overflow Vulnerability—