CVE-2023-22918
A post-authentication information exposure vulnerability in the CGI program of Zyxel ATP series...
A post-authentication information exposure vulnerability in the CGI program of Zyxel ATP series firmware versions 4.32 through 5.35, USG FLEX series firmware versions 4.50 through 5.35, USG FLEX 50(W) firmware versions 4.16 through 5.35, USG20(W)-VPN firmware versions 4.16 through 5.35, VPN series firmware versions 4.30 through 5.35, NWA110AX firmware version 6.50(ABTG.2) and earlier versions, WAC500 firmware version 6.50(ABVS.0) and earlier versions, and WAX510D firmware version 6.50(ABTF.2) and earlier versions, which could allow a remote authenticated attacker to retrieve encrypted information of the administrator on an affected device.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- None
- Availability
- None
Exploit likelihood
What each source reports
CVE List Score used
A post-authentication information exposure vulnerability in the CGI program of Zyxel ATP series firmware versions 4.32 through 5.35, USG FLEX series firmware versions 4.50 through 5.35, USG FLEX 50(W) firmware versions 4.16 through 5.35, USG20(W)-VPN firmware versions 4.16 through 5.35, VPN series firmware versions 4.30 through 5.35, NWA110AX firmware version 6.50(ABTG.2) and earlier versions, WAC500 firmware version 6.50(ABVS.0) and earlier versions, and WAX510D firmware version 6.50(ABTF.2) and earlier versions, which could allow a remote authenticated attacker to retrieve encrypted information of the administrator on an affected device.
- Record
CVE-2023-22918- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N - Weakness
- CWE-359
- Updated
- 2026-11-02
EUVDEUVD-2023-27020
A post-authentication information exposure vulnerability in the CGI program of Zyxel ATP series firmware versions 4.32 through 5.35, USG FLEX series firmware versions 4.50 through 5.35, USG FLEX 50(W) firmware versions 4.16 through 5.35, USG20(W)-VPN firmware versions 4.16 through 5.35, VPN series firmware versions 4.30 through 5.35, NWA110AX firmware version 6.50(ABTG.2) and earlier versions, WAC500 firmware version 6.50(ABVS.0) and earlier versions, and WAX510D firmware version 6.50(ABTF.2) and earlier versions, which could allow a remote authenticated attacker to retrieve encrypted information of the administrator on an affected device.
- Record
EUVD-2023-27020- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-q9h2-893q-85gq
A post-authentication information exposure vulnerability in the CGI program of Zyxel ATP series...
A post-authentication information exposure vulnerability in the CGI program of Zyxel ATP series firmware versions 4.32 through 5.35, USG FLEX series firmware versions 4.50 through 5.35, USG FLEX 50(W) firmware versions 4.16 through 5.35, USG20(W)-VPN firmware versions 4.16 through 5.35, VPN series firmware versions 4.30 through 5.35, NWA110AX firmware version 6.50(ABTG.2) and earlier versions, WAC500 firmware version 6.50(ABVS.0) and earlier versions, and WAX510D firmware version 6.50(ABTF.2) and earlier versions, which could allow a remote authenticated attacker to retrieve encrypted information of the administrator on an affected device.
- Record
GHSA-q9h2-893q-85gq- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N - Weakness
- CWE-359
- Updated
- 2026-11-02
NVD
A post-authentication information exposure vulnerability in the CGI program of Zyxel ATP series firmware versions 4.32 through 5.35, USG FLEX series firmware versions 4.50 through 5.35, USG FLEX 50(W) firmware versions 4.16 through 5.35, USG20(W)-VPN firmware versions 4.16 through 5.35, VPN series firmware versions 4.30 through 5.35, NWA110AX firmware version 6.50(ABTG.2) and earlier versions, WAC500 firmware version 6.50(ABVS.0) and earlier versions, and WAX510D firmware version 6.50(ABTF.2) and earlier versions, which could allow a remote authenticated attacker to retrieve encrypted information of the administrator on an affected device.
- Record
CVE-2023-22918- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N - Weakness
- CWE-359
- Updated
- 2026-11-02
Affected products
- zyxel atp series firmware
- zyxel nwa110ax firmware
- zyxel usg flex 50(w) firmware
- zyxel usg flex series firmware
- zyxel usg20(w)-vpn firmware
- zyxel vpn series firmware
- zyxel wac500 firmware
- zyxel wax510d firmware
- zyxel atp100 firmware
- zyxel atp100w firmware
- zyxel atp200 firmware
- zyxel atp500 firmware
Show 44 moreShow less
- zyxel atp700 firmware
- zyxel atp800 firmware
- zyxel nap203 firmware
- zyxel nap303 firmware
- zyxel nap353 firmware
- zyxel nwa1123-ac-pro firmware
- zyxel nwa1123-ac hd firmware
- zyxel nwa1123acv3 firmware
- zyxel nwa210ax firmware
- zyxel nwa220ax-6e firmware
- zyxel nwa50ax-pro firmware
- zyxel nwa50ax firmware
- zyxel nwa5123-ac hd firmware
- zyxel nwa55axe firmware
- zyxel nwa90ax-pro firmware
- zyxel nwa90ax firmware
- zyxel usg20-vpn firmware
- zyxel usg 20w-vpn firmware
- zyxel usg flex 100 firmware
- zyxel usg flex 100w firmware
- zyxel usg flex 200 firmware
- zyxel usg flex 500 firmware
- zyxel usg flex 50 firmware
- zyxel usg flex 50w firmware
- zyxel usg flex 700 firmware
- zyxel vpn1000 firmware
- zyxel vpn100 firmware
- zyxel vpn300 firmware
- zyxel vpn50 firmware
- zyxel wac500h firmware
- zyxel wac5302d-sv2 firmware
- zyxel wac6103d-i firmware
- zyxel wac6303d-s firmware
- zyxel wac6502d-e firmware
- zyxel wac6502d-s firmware
- zyxel wac6503d-s firmware
- zyxel wac6552d-s firmware
- zyxel wac6553d-e firmware
- zyxel wax610d firmware
- zyxel wax620d-6e firmware
- zyxel wax630s firmware
- zyxel wax640s-6e firmware
- zyxel wax650s firmware
- zyxel wax655e firmware
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2023-22918 is a medium vulnerability (CVSS 6.5) in Zyxel Atp Series Firmware, published April 24, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.77%, the 55th percentile. No source names a fixed version.