Zyxel Usg Flex 500h Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Zyxel Usg Flex 500h Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2023-6764 — CVSS 8.1 (high): A format string vulnerability in a function of the IPSec VPN feature in Zyxel ATP series firmware versions from 4.32 through 5.37 Patch 1…
• CVE-2023-6398 — CVSS 7.2 (high): A post-authentication command injection vulnerability in the file upload binary in Zyxel ATP series firmware versions from 4.32 through…
• CVE-2023-6397 — CVSS 6.5 (medium): A null pointer dereference vulnerability in Zyxel ATP series firmware versions from 4.32 through 5.37 Patch 1 and USG FLEX series firmware…
• CVE-2023-6399 — CVSS 5.7 (medium): A format string vulnerability in Zyxel ATP series firmware versions from 4.32 through 5.37 Patch 1, USG FLEX series firmware versions from…