Description
Zyxel ATP, USG FLEX, USG FLEX 50(W), USG20(W)-VPN, VPN, and ZyWALL/USG firewalls contain a buffer overflow vulnerability in the notification function that could allow an unauthenticated attacker to cause denial-of-service (DoS) conditions and remote code execution on an affected device.
Recommended action
Apply updates per vendor instructions.
CISA remediation due date for U.S. federal agencies: 26 Jun 2023.
Collected automatically from public sources. Verify affected versions and fixes in the vendor's notice before acting.