CVE-2023-6397: zyxel atp series firmware NULL Pointer Dereference
Vulnerability summary
CVE-2023-6397 is a medium (CVSS 6.5) NULL Pointer Dereference vulnerability in zyxel atp series firmware. EPSS estimates a 0.30% chance of exploitation in the next 30 days, higher than 21.4% of scored vulnerabilities.
Timeline
- 20-02-2024PublishedVulnerability first disclosed.
- 02-08-2024Last modifiedVulnerability information updated.
Description
A null pointer dereference vulnerability in Zyxel ATP series firmware versions from 4.32 through 5.37 Patch 1 and USG FLEX series firmware versions from 4.50 through 5.37 Patch 1 could allow a LAN-based attacker to cause denial-of-service (DoS) conditions by downloading a crafted RAR compressed file onto a LAN-side host if the firewall has the “Anti-Malware” feature enabled.
CVSS metrics
2 scores · 2 sources · 1 version- NVDNIST5.3MediumCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:HDiffers
EPSS trend
Probability
0.30%
Chance of exploitation in the next 30 days
Percentile
21%
Versus all other CVEs
30-day change
0.00 pp
From 0.30% on 20-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Zyxel21 products
- atp series firmwareversion 4.32 through 5.37 Patch 1
- atp100_firmware≥ 4.32, < 5.37 | 5.37 | 5.37:patch1
- atp100w_firmware≥ 4.32, < 5.37 | 5.37 | 5.37:patch1
- atp200_firmware≥ 4.32, < 5.37 | 5.37 | 5.37:patch1
- atp500_firmware≥ 4.32, < 5.37 | 5.37 | 5.37:patch1
1 vendor · 21 products
References
1 links- www.zyxel.com/global/…Vendor Advisory