CVE-2024-7203

Published Sep 3, 2024 CVSS 3.1 · 7.2 High EPSS 1.3% KEV · Not listed

Description

A post-authentication command injection vulnerability in Zyxel ATP series firmware versions from V4.60 through V5.38 and USG FLEX series firmware versions from V4.60 through V5.38 could allow an authenticated attacker with administrator privileges to execute some operating system (OS) commands on an affected device by executing a crafted CLI command.

Affected Products

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Zyxel

ATP series firmware

unaffected

Version	Status	Constraints
`versions V4.60 through V5.38`	affected	—

Zyxel

USG FLEX series firmware

unaffected

Version	Status	Constraints
`versions V4.60 through V5.38`	affected	—

Configuration 1 [-]

AND

cpe:2.3:o:zyxel:zld:*:*:*:*:*:*:*:*

OR	cpe:2.3:h:zyxel:atp100:-:::::::*
	cpe:2.3:h:zyxel:atp100w:-:::::::*
	cpe:2.3:h:zyxel:atp200:-:::::::*
	cpe:2.3:h:zyxel:atp500:-:::::::*
	cpe:2.3:h:zyxel:atp700:-:::::::*
	cpe:2.3:h:zyxel:atp800:-:::::::*

Configuration 2 [-]

AND

cpe:2.3:o:zyxel:zld:*:*:*:*:*:*:*:*

OR	cpe:2.3:h:zyxel:usg_flex_100:-:::::::*
	cpe:2.3:h:zyxel:usg_flex_100ax:-:::::::*
	cpe:2.3:h:zyxel:usg_flex_100w:-:::::::*
	cpe:2.3:h:zyxel:usg_flex_200:-:::::::*
	cpe:2.3:h:zyxel:usg_flex_50:-:::::::*
	cpe:2.3:h:zyxel:usg_flex_500:-:::::::*
	cpe:2.3:h:zyxel:usg_flex_50w:-:::::::*
	cpe:2.3:h:zyxel:usg_flex_700:-:::::::*

No data.

No data available yet.

Remediation

No solution or workaround provided in the CVE record

Tracking

Advisories

Source	ID	Title
EUVD	EUVD-2024-48171	A post-authentication command injection vulnerability in Zyxel ATP series firmware versions from V4.60 through V5.38 and USG FLEX series firmware versions from V4.60 through V5.38 could allow an authenticated attacker with administrator privileges to execute some operating system (OS) commands on an affected device by executing a crafted CLI command.

Metrics

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required High

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploit prediction score: 1.3% (1.339% probability within 30 days)

Exploitation none

Automatable no

Technical Impact total

References

Link	Providers
https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-multiple-vulnerabilities-in-firewalls-09-03-2024

History

Dec 13, 2024 4:45 PM First appearance in the feed. Affected versions updated. Affected vendors updated View changes

Type	Values Removed	Values Added
First Time appeared		Zyxel zld
CPEs	cpe:2.3:o:zyxel:zld_firmware::::::::	cpe:2.3:o:zyxel:zld::::::::
Vendors & Products	Zyxel zld Firmware	Zyxel zld

Sep 5, 2024 3:00 PM First appearance in the feed. Affected versions updated. Affected vendors updated View changes

Type	Values Removed	Values Added
First Time appeared		Zyxel atp100 Zyxel atp100w Zyxel atp200 Zyxel atp500 Zyxel atp700 Zyxel atp800 Zyxel usg Flex 100 Zyxel usg Flex 100ax Zyxel usg Flex 100w Zyxel usg Flex 200 Zyxel usg Flex 50 Zyxel usg Flex 500 Zyxel usg Flex 50w Zyxel usg Flex 700 Zyxel zld Firmware
CPEs		cpe:2.3:h:zyxel:atp100:-:::::::* cpe:2.3:h:zyxel:atp100w:-:::::::* cpe:2.3:h:zyxel:atp200:-:::::::* cpe:2.3:h:zyxel:atp500:-:::::::* cpe:2.3:h:zyxel:atp700:-:::::::* cpe:2.3:h:zyxel:atp800:-:::::::* cpe:2.3:h:zyxel:usg_flex_100:-:::::::* cpe:2.3:h:zyxel:usg_flex_100ax:-:::::::* cpe:2.3:h:zyxel:usg_flex_100w:-:::::::* cpe:2.3:h:zyxel:usg_flex_200:-:::::::* cpe:2.3:h:zyxel:usg_flex_500:-:::::::* cpe:2.3:h:zyxel:usg_flex_50:-:::::::* cpe:2.3:h:zyxel:usg_flex_50w:-:::::::* cpe:2.3:h:zyxel:usg_flex_700:-:::::::* cpe:2.3:o:zyxel:zld_firmware::::::::
Vendors & Products		Zyxel atp100 Zyxel atp100w Zyxel atp200 Zyxel atp500 Zyxel atp700 Zyxel atp800 Zyxel usg Flex 100 Zyxel usg Flex 100ax Zyxel usg Flex 100w Zyxel usg Flex 200 Zyxel usg Flex 50 Zyxel usg Flex 500 Zyxel usg Flex 50w Zyxel usg Flex 700 Zyxel zld Firmware

Sep 3, 2024 2:30 PM First appearance in the feed. Affected versions updated. Affected vendors updated. Scoring metrics updated View changes

Type	Values Removed	Values Added
First Time appeared		Zyxel Zyxel atp100 Firmware Zyxel atp100w Firmware Zyxel atp200 Firmware Zyxel atp500 Firmware Zyxel atp700 Firmware Zyxel atp800 Firmware Zyxel usg Flex 100 Firmware Zyxel usg Flex 100ax Firmware Zyxel usg Flex 100h Firmware Zyxel usg Flex 100w Firmware Zyxel usg Flex 200 Firmware Zyxel usg Flex 200h Firmware Zyxel usg Flex 500 Firmware Zyxel usg Flex 500h Firmware Zyxel usg Flex 50 Firmware Zyxel usg Flex 50ax Firmware Zyxel usg Flex 700 Firmware Zyxel usg Flex 700h Firmware
CPEs		cpe:2.3:o:zyxel:atp100_firmware:::::::: cpe:2.3:o:zyxel:atp100w_firmware:::::::: cpe:2.3:o:zyxel:atp200_firmware:::::::: cpe:2.3:o:zyxel:atp500_firmware:::::::: cpe:2.3:o:zyxel:atp700_firmware:::::::: cpe:2.3:o:zyxel:atp800_firmware:::::::: cpe:2.3:o:zyxel:usg_flex_100_firmware:::::::: cpe:2.3:o:zyxel:usg_flex_100ax_firmware:::::::: cpe:2.3:o:zyxel:usg_flex_100h_firmware:::::::: cpe:2.3:o:zyxel:usg_flex_100w_firmware:::::::: cpe:2.3:o:zyxel:usg_flex_200_firmware:::::::: cpe:2.3:o:zyxel:usg_flex_200h_firmware:::::::: cpe:2.3:o:zyxel:usg_flex_500_firmware:::::::: cpe:2.3:o:zyxel:usg_flex_500h_firmware:::::::: cpe:2.3:o:zyxel:usg_flex_50_firmware:::::::: cpe:2.3:o:zyxel:usg_flex_50ax_firmware:::::::: cpe:2.3:o:zyxel:usg_flex_700_firmware:::::::: cpe:2.3:o:zyxel:usg_flex_700h_firmware::::::::
Vendors & Products		Zyxel Zyxel atp100 Firmware Zyxel atp100w Firmware Zyxel atp200 Firmware Zyxel atp500 Firmware Zyxel atp700 Firmware Zyxel atp800 Firmware Zyxel usg Flex 100 Firmware Zyxel usg Flex 100ax Firmware Zyxel usg Flex 100h Firmware Zyxel usg Flex 100w Firmware Zyxel usg Flex 200 Firmware Zyxel usg Flex 200h Firmware Zyxel usg Flex 500 Firmware Zyxel usg Flex 500h Firmware Zyxel usg Flex 50 Firmware Zyxel usg Flex 50ax Firmware Zyxel usg Flex 700 Firmware Zyxel usg Flex 700h Firmware
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Sep 3, 2024 2:00 AM Description updated. Weaknesses updated. Added references. Scoring metrics updated View changes

Type	Values Removed	Values Added
Description		A post-authentication command injection vulnerability in Zyxel ATP series firmware versions from V4.60 through V5.38 and USG FLEX series firmware versions from V4.60 through V5.38 could allow an authenticated attacker with administrator privileges to execute some operating system (OS) commands on an affected device by executing a crafted CLI command.
Weaknesses		CWE-78
References		https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-multiple-vulnerabilities-in-firewalls-09-03-2024
Metrics		cvssV3_1 `{'score': 7.2, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'}`

Subscriptions

Zyxel Atp100 Atp100 Firmware Atp100w Atp100w Firmware Atp200 Atp200 Firmware Atp500 Atp500 Firmware Atp700 Atp700 Firmware Atp800 Atp800 Firmware Usg Flex 100 Usg Flex 100 Firmware Usg Flex 100ax Usg Flex 100ax Firmware Usg Flex 100h Firmware Usg Flex 100w Usg Flex 100w Firmware Usg Flex 200 Usg Flex 200 Firmware Usg Flex 200h Firmware Usg Flex 50 Usg Flex 500 Usg Flex 500 Firmware Usg Flex 500h Firmware Usg Flex 50 Firmware Usg Flex 50ax Firmware Usg Flex 50w Usg Flex 700 Usg Flex 700 Firmware Usg Flex 700h Firmware Zld

Weaknesses