CVE-2023-28768

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-28768
Improper frame handling in the Zyxel XGS2220-30 firmware version V4.80(ABXN.1), XMG1930-30 firmware version V4.80(ACAR.1), and XS1930-10 firmware version V4.80(ABQE.1) could allow an unauthenticated LAN-based attacker to cause denial-of-service (DoS) conditions by sending crafted frames to an affected switch.

6.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 3.6

Attack Vector ADJACENT_NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-dos-vulnerability-of-xgs2220-xmg1930-and-xs1930-series-switches Patch Vendor Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:zyxel:xgs2220-30_firmware:4.80\(abxn.1\):*:*:*:*:*:*:*
cpe:2.3:h:zyxel:xgs2220-30:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:zyxel:xgs2220-30f_firmware:4.80\(abye.1\):*:*:*:*:*:*:*
cpe:2.3:h:zyxel:xgs2220-30f:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:zyxel:xgs2220-30hp_firmware:4.80\(abxo.1\):*:*:*:*:*:*:*
cpe:2.3:h:zyxel:xgs2220-30hp:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
cpe:2.3:o:zyxel:xgs2220-54_firmware:4.80\(abxp.1\):*:*:*:*:*:*:*
cpe:2.3:h:zyxel:xgs2220-54:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
cpe:2.3:o:zyxel:xgs2220-54fp_firmware:4.80\(acce.1\):*:*:*:*:*:*:*
cpe:2.3:h:zyxel:xgs2220-54fp:-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND
cpe:2.3:o:zyxel:xgs2220-54hp_firmware:4.80\(abxq.1\):*:*:*:*:*:*:*
cpe:2.3:h:zyxel:xgs2220-54hp:-:*:*:*:*:*:*:*

Configuration 7 (hide)

AND
cpe:2.3:o:zyxel:xmg1930-30_firmware:4.80\(acar.1\):*:*:*:*:*:*:*
cpe:2.3:h:zyxel:xmg1930-30:-:*:*:*:*:*:*:*

Configuration 8 (hide)

AND
cpe:2.3:o:zyxel:xmg1930-30hp_firmware:4.80\(acas.1\):*:*:*:*:*:*:*
cpe:2.3:h:zyxel:xmg1930-30hp:-:*:*:*:*:*:*:*

Configuration 9 (hide)

AND
cpe:2.3:o:zyxel:xs1930-10_firmware:4.80\(abqe.1\):*:*:*:*:*:*:*
cpe:2.3:h:zyxel:xs1930-10:-:*:*:*:*:*:*:*

Configuration 10 (hide)

AND
cpe:2.3:o:zyxel:xs1930-12f_firmware:4.80\(abzv.1\):*:*:*:*:*:*:*
cpe:2.3:h:zyxel:xs1930-12f:-:*:*:*:*:*:*:*

Configuration 11 (hide)

AND
cpe:2.3:o:zyxel:xs1930-12hp_firmware:4.80\(abqf.1\):*:*:*:*:*:*:*
cpe:2.3:h:zyxel:xs1930-12hp:-:*:*:*:*:*:*:*
History

21 Aug 2023, 16:07

Type Values Removed Values Added
CPE cpe:2.3:h:zyxel:xgs2220-54fp:-:*:*:*:*:*:*:*
cpe:2.3:o:zyxel:xgs2220-30_firmware:4.80\(abxn.1\):*:*:*:*:*:*:*
cpe:2.3:o:zyxel:xs1930-10_firmware:4.80\(abqe.1\):*:*:*:*:*:*:*
cpe:2.3:h:zyxel:xs1930-10:-:*:*:*:*:*:*:*
cpe:2.3:h:zyxel:xgs2220-54hp:-:*:*:*:*:*:*:*
cpe:2.3:o:zyxel:xs1930-12hp_firmware:4.80\(abqf.1\):*:*:*:*:*:*:*
cpe:2.3:o:zyxel:xgs2220-54hp_firmware:4.80\(abxq.1\):*:*:*:*:*:*:*
cpe:2.3:o:zyxel:xgs2220-30f_firmware:4.80\(abye.1\):*:*:*:*:*:*:*
cpe:2.3:o:zyxel:xgs2220-30hp_firmware:4.80\(abxo.1\):*:*:*:*:*:*:*
cpe:2.3:h:zyxel:xs1930-12f:-:*:*:*:*:*:*:*
cpe:2.3:o:zyxel:xs1930-12f_firmware:4.80\(abzv.1\):*:*:*:*:*:*:*
cpe:2.3:o:zyxel:xmg1930-30hp_firmware:4.80\(acas.1\):*:*:*:*:*:*:*
cpe:2.3:h:zyxel:xmg1930-30:-:*:*:*:*:*:*:*
cpe:2.3:h:zyxel:xgs2220-54:-:*:*:*:*:*:*:*
cpe:2.3:o:zyxel:xmg1930-30_firmware:4.80\(acar.1\):*:*:*:*:*:*:*
cpe:2.3:o:zyxel:xgs2220-54_firmware:4.80\(abxp.1\):*:*:*:*:*:*:*
cpe:2.3:h:zyxel:xs1930-12hp:-:*:*:*:*:*:*:*
cpe:2.3:o:zyxel:xgs2220-54fp_firmware:4.80\(acce.1\):*:*:*:*:*:*:*
cpe:2.3:h:zyxel:xgs2220-30f:-:*:*:*:*:*:*:*
cpe:2.3:h:zyxel:xgs2220-30hp:-:*:*:*:*:*:*:*
cpe:2.3:h:zyxel:xgs2220-30:-:*:*:*:*:*:*:*
cpe:2.3:h:zyxel:xmg1930-30hp:-:*:*:*:*:*:*:*
First Time Zyxel xgs2220-54hp Firmware
Zyxel xgs2220-54fp
Zyxel
Zyxel xs1930-12f Firmware
Zyxel xgs2220-54
Zyxel xs1930-10
Zyxel xs1930-10 Firmware
Zyxel xgs2220-30f Firmware
Zyxel xgs2220-30f
Zyxel xgs2220-30
Zyxel xgs2220-30hp Firmware
Zyxel xmg1930-30hp
Zyxel xgs2220-30hp
Zyxel xmg1930-30hp Firmware
Zyxel xgs2220-30 Firmware
Zyxel xs1930-12f
Zyxel xmg1930-30 Firmware
Zyxel xgs2220-54fp Firmware
Zyxel xgs2220-54 Firmware
Zyxel xgs2220-54hp
Zyxel xmg1930-30
Zyxel xs1930-12hp Firmware
Zyxel xs1930-12hp
References (MISC) https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-dos-vulnerability-of-xgs2220-xmg1930-and-xs1930-series-switches - (MISC) https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-dos-vulnerability-of-xgs2220-xmg1930-and-xs1930-series-switches - Patch, Vendor Advisory
CWE CWE-755

14 Aug 2023, 17:27

Type Values Removed Values Added
New CVE
Information

Published : 2023-08-14 17:15

Updated : 2023-12-10 15:14

NVD link : CVE-2023-28768

Mitre link : CVE-2023-28768

CVE.ORG link : CVE-2023-28768

JSON object : View

Products Affected

zyxel

  • xgs2220-54hp_firmware
  • xmg1930-30
  • xmg1930-30hp
  • xgs2220-54fp
  • xgs2220-30f
  • xs1930-12hp_firmware
  • xgs2220-30hp_firmware
  • xgs2220-54
  • xs1930-10
  • xgs2220-30_firmware
  • xmg1930-30hp_firmware
  • xgs2220-30
  • xgs2220-54_firmware
  • xgs2220-30f_firmware
  • xs1930-10_firmware
  • xmg1930-30_firmware
  • xs1930-12f
  • xs1930-12f_firmware
  • xgs2220-54hp
  • xgs2220-30hp
  • xgs2220-54fp_firmware
  • xs1930-12hp
CWE
CWE-755

Improper Handling of Exceptional Conditions