CVE-2023-6397

A null pointer dereference vulnerability in Zyxel ATP series firmware versions from 4.32 through 5.37 Patch 1 and USG FLEX series firmware versions from 4.50 through 5.37 Patch 1 could allow a LAN-based attacker to cause denial-of-service (DoS) conditions by downloading a crafted RAR compressed file onto a LAN-side host if the firewall has the “Anti-Malware” feature enabled.

• zyxel atp100 firmware (>= 4.32 < 5.37) • zyxel atp100 firmware 5.37 • zyxel atp100w firmware (>= 4.32 < 5.37) • zyxel atp100w firmware 5.37 • zyxel atp200 firmware (>= 4.32 < 5.37) • zyxel atp200 firmware 5.37 • zyxel atp500 firmware (>= 4.32 < 5.37) • zyxel atp500 firmware 5.37 • zyxel atp700 firmware (>= 4.32 < 5.37) • zyxel atp700 firmware 5.37 • zyxel atp800 firmware (>= 4.32 < 5.37) • zyxel atp800 firmware 5.37 • zyxel usg flex 100 firmware (>= 4.50 < 5.37) • zyxel usg flex 100 firmware 5.37 • zyxel usg flex 100ax firmware (>= 4.50 < 5.37) • zyxel usg flex 100ax firmware 5.37 • zyxel usg flex 100h firmware (>= 4.50 < 5.37) • zyxel usg flex 100h firmware 5.37 • zyxel usg flex 100w firmware (>= 4.50 < 5.37) • zyxel usg flex 100w firmware 5.37 • zyxel usg flex 200 firmware (>= 4.50 < 5.37) • zyxel usg flex 200 firmware 5.37 • zyxel usg flex 200h firmware (>= 4.50 < 5.37) • zyxel usg flex 200h firmware 5.37 • zyxel usg flex 200hp firmware (>= 4.50 < 5.37) • zyxel usg flex 200hp firmware 5.37 • zyxel usg flex 50 firmware (>= 4.50 < 5.37) • zyxel usg flex 50 firmware 5.37 • zyxel usg flex 500 firmware (>= 4.50 < 5.37) • zyxel usg flex 500 firmware 5.37 • zyxel usg flex 500h firmware (>= 4.50 < 5.37) • zyxel usg flex 500h firmware 5.37 • zyxel usg flex 50w firmware (>= 4.50 < 5.37) • zyxel usg flex 50w firmware 5.37 • zyxel usg flex 700 firmware (>= 4.50 < 5.37) • zyxel usg flex 700 firmware 5.37 • zyxel usg flex 700h firmware (>= 4.50 < 5.37) • zyxel usg flex 700h firmware 5.37