CVE-2023-5797
CVE-2023-5797 is a medium-severity vulnerability in Zyxel Zld with a CVSS 3.x base score of 5.5. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-269.
Key facts
- Severity: Medium (CVSS 3.x base score 5.5)
- EPSS exploit prediction: 0% (12th percentile)
- Actively exploited: Not listed in CISA KEV
- Weakness: CWE-269
- Affected product: Zyxel Zld
- Published:
- Last modified:
Description
An improper privilege management vulnerability in the debug CLI command of the Zyxel ATP series firmware versions 4.32 through 5.37, USG FLEX series firmware versions 4.50 through 5.37, USG FLEX 50(W) series firmware versions 4.16 through 5.37, USG20(W)-VPN series firmware versions 4.16 through 5.37, VPN series firmware versions 4.30 through 5.37, NWA50AX firmware version 6.29(ABYW.2), WAC500 firmware version 6.65(ABVS.1), WAX300H firmware version 6.60(ACHF.1), and WBE660S firmware version 6.65(ACGG.1), could allow an authenticated local attacker to access the administrator’s logs on an affected device.
Frequently asked questions
- What is CVE-2023-5797?
- An improper privilege management vulnerability in the debug CLI command of the Zyxel ATP series firmware versions 4.32 through 5.37, USG FLEX series firmware versions 4.50 through 5.37, USG FLEX 50(W) series firmware versions 4.16 through 5.37, USG20(W)-VPN series firmware versions 4.16 through 5.37, VPN series firmware versions 4.30 through 5.37, NWA50AX firmware version 6.29(ABYW.2), WAC500 firmware version 6.65(ABVS.1), WAX300H firmware version 6.60(ACHF.1), and WBE660S firmware version 6.65(ACGG.1), could allow an authenticated local attacker to access the administrator’s logs on an affected device.
- How severe is CVE-2023-5797?
- CVE-2023-5797 has a CVSS 3.x base score of 5.5, rated medium severity. It is exploitable over local access with low attack complexity, requires low privileges and no user interaction. Impact on confidentiality is high, integrity none, and availability none.
- Is CVE-2023-5797 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (12th percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2023-5797?
- CVE-2023-5797 primarily affects Zyxel Zld. In total, 20 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
- How do I fix CVE-2023-5797?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
- When was CVE-2023-5797 published?
- CVE-2023-5797 was published on 2023-11-28 and last updated on 2026-06-17.
References
Affected products (20)
- cpe:2.3:o:zyxel:zld:*:*:*:*:*:*:*:*
- cpe:2.3:o:zyxel:nwa110ax_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:zyxel:nwa1123acv3_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:zyxel:nwa210ax_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:zyxel:nwa220ax-6e_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:zyxel:nwa50ax_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:zyxel:nwa50ax-pro_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:zyxel:nwa55axe_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:zyxel:nwa90ax_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:zyxel:nwa90ax-pro_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:zyxel:wac500_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:zyxel:wac500h_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:zyxel:wax510d_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:zyxel:wax610d_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:zyxel:wax620d-6e_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:zyxel:wax630s_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:zyxel:wax640s-6e_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:zyxel:wax650s_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:zyxel:wax655e_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:zyxel:wbe660s_firmware:*:*:*:*:*:*:*:*
More vulnerabilities in Zyxel Zld
- CVE-2020-25014 — Critical (CVSS 9.8): A stack-based buffer overflow in fbwifi_continue.cgi on Zyxel UTM and VPN series of gateways running firmware version…
- CVE-2025-9133 — High (CVSS 8.1): A missing authorization vulnerability in Zyxel ATP series firmware versions from V4.32 through V5.40, USG FLEX series…
- CVE-2024-42057 — High (CVSS 8.1): A command injection vulnerability in the IPSec VPN feature of Zyxel ATP series firmware versions from V4.32 through…
- CVE-2024-11667 — High (CVSS 7.5): A directory traversal vulnerability in the web management interface of Zyxel ATP series firmware versions V5.00 through…
- CVE-2024-42058 — High (CVSS 7.5): A null pointer dereference vulnerability in Zyxel ATP series firmware versions from V4.32 through V5.38, USG FLEX…
- CVE-2023-4398 — High (CVSS 7.5): An integer overflow vulnerability in the source code of the QuickSec IPSec toolkit used in the VPN feature of the Zyxel…
All CVEs affecting Zyxel Zld →
Other CWE-269 (Improper Privilege Management) vulnerabilities
- CVE-2026-31852 — Critical (CVSS 10.0): Jellyfin is an open-source media system. The code-quality.yml GitHub Actions workflow in jellyfin/jellyfin-ios is…
- CVE-2025-20282 — Critical (CVSS 10.0): A vulnerability in an internal API of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to…
- CVE-2025-0505 — Critical (CVSS 10.0): On Arista CloudVision systems (virtual or physical on-premise deployments), Zero Touch Provisioning can be used to gain…
- CVE-2023-48418 — Critical (CVSS 10.0): In checkDebuggingDisallowed of DeviceVersionFragment.java, there is a possible way to access adb before SUW…
- CVE-2023-48419 — Critical (CVSS 10.0): An attacker in the wifi vicinity of a target Google Home can spy on the victim, resulting in Elevation of Privilege
- CVE-2023-31273 — Critical (CVSS 10.0): Protection mechanism failure in some Intel DCM software before version 5.2 may allow an unauthenticated user to…
Browse all CWE-269 (Improper Privilege Management) vulnerabilities →