An integer overflow vulnerability in the source code of the QuickSec IPSec toolkit used in the VPN feature of the Zyxel ATP series firmware versions 4.32 through 5.37, USG FLEX series firmware versions 4.50 through 5.37, USG FLEX 50(W) series firmware versions 4.16 through 5.37, USG20(W)-VPN series firmware versions 4.16 through 5.37, and VPN series firmware versions 4.30 through 5.37, could allow an unauthenticated attacker to cause denial-of-service (DoS) conditions on an affected device by sending a crafted IKE packet.
References
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: Zyxel
Published: 2023-11-28T01:48:28.586Z
Updated: 2023-11-28T01:48:28.586Z
Reserved: 2023-08-17T08:27:42.249Z
Link: CVE-2023-4398
JSON object: View
NVD Information
Status : Analyzed
Published: 2023-11-28T02:15:43.187
Modified: 2023-12-04T18:04:39.363
Link: CVE-2023-4398
JSON object: View
Redhat Information
No data.
CWE