CVE:CVE-2023-22917
CNNVD:CNNVD-202304-1907
Zyxel ATP是中国合勤（Zyxel）公司的一款防火墙。
Zyxel ATP系列5.10至5.35 固件版本、USG FLEX系列5.00至5.35固件版本、USG FLEX 50（W）5.10至5.35固件版本、USG20（W）-VPN 5.10至5.35 固件版本以及VPN系列5.00至5.35 固件版本存在安全漏洞，该漏洞源于sdwan_iface_ipc二进制文件中存在缓冲区溢出。攻击者利用该漏洞通过上传特制的配置文件，引发带有请求错误消息的核心转储。
solution:Upgrade zyxel usg_flex_100_firmware to a higher version than 5.32,and avoid the version [5.00,5.32]; Upgrade zyxel usg_flex_100w_firmware to a higher version than 5.32,and avoid the version [5.00,5.32]; Upgrade zyxel usg_flex_200_firmware to a higher version than 5.32,and avoid the version [5.00,5.32]; Upgrade zyxel usg_flex_50_firmware to a higher version than 5.32,and avoid the version [5.00,5.32]; Upgrade zyxel usg_flex_50w_firmware to a higher version than 5.32,and avoid the version [5.10,5.32]; Upgrade zyxel usg_flex_500_firmware to a higher version than 5.32,and avoid the version [5.00,5.32]; Upgrade zyxel usg_flex_700_firmware to a higher version than 5.32,and avoid the version [5.00,5.32]; Upgrade zyxel vpn100_firmware to a higher version than 5.35,and avoid the version [5.00,5.35]; Upgrade zyxel vpn1000_firmware to a higher version than 5.35,and avoid the version [5.00,5.35]; Upgrade zyxel vpn300_firmware to a higher version than 5.35,and avoid the version [5.00,5.35]; Upgrade zyxel vpn50_firmware to a higher version than 5.35,and avoid the version [5.00,5.35]; Upgrade zyxel usg_20w-vpn_firmware to a higher version than 5.32,and avoid the version [5.10,5.32]; Upgrade zyxel atp100_firmware to a higher version than 5.32,and avoid the version [5.10,5.32]; Upgrade zyxel atp100w_firmware to a higher version than 5.32,and avoid the version [5.10,5.32]; Upgrade zyxel atp200_firmware to a higher version than 5.32,and avoid the version [5.10,5.32]; Upgrade zyxel atp500_firmware to a higher version than 5.32,and avoid the version [5.10,5.32]; Upgrade zyxel atp700_firmware to a higher version than 5.32,and avoid the version [5.10,5.32]; Upgrade zyxel atp800_firmware to a higher version than 5.32,and avoid the version [5.10,5.32]