VDB
GCVE-110-NCSC-2024-357
GCVE-110-NCSC-2024-357
Advisory PublishedCVSS 4.9/10
Zyxel heeft kwetsbaarheden verholpen in de firmware van ATP en USG Flex firewalls.
Weaknesses (CWE)
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')CWE-476NULL Pointer DereferenceCWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Risk Scores
CVSS 3.1
4.9/10
Medium · CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| zyxel | usg_flex_series_firmware | — | — |
| zyxel | usg20_w_-vpn_series_firmware | — | — |
| zyxel | usg_flex_50_w__series_firmware | — | — |
| zyxel | atp_series_firmware | — | — |
Browse GCVE Records
74,585 records in the GCVE database · Updated July 24, 2026
No matching records found.
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.