Known vulnerabilities in ATP series 5.37 Patch 1
Vendor:
ZyXEL Communications Corp.
Software:
ATP series
Version:
5.37 Patch 1
Software CPE:
cpe:2.3:h:zyxel_communications_corp:atp_series:*:*:*:*:*:*:*:*
Website:
https://www.zyxel.com/
Total vulnerabilities:
4
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Vulnerabilities by Severity
Vulnerabilities (4)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU86621 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2023-6398 |
CWE-78 | Low | 5.37 Patch 2 | 20.02.2024 |
SB2024022031 |
||
| #VU86619 - Use of Externally-Controlled Format String CVE-2023-6764 |
CWE-134 | High | 5.37 Patch 2 | 20.02.2024 |
SB2024022031 |
||
| #VU86615 - Use of Externally-Controlled Format String CVE-2023-6399 |
CWE-134 | Low | 5.37 Patch 2 | 20.02.2024 |
SB2024022031 |
||
| #VU86610 - NULL Pointer Dereference CVE-2023-6397 |
CWE-476 | Low | 5.37 Patch 2 | 20.02.2024 |
SB2024022031 |