Created on 2024-09-05 08:37 and updated on 2024-09-05 08:38.

Description

Zyxel has released patches addressing multiple vulnerabilities in some firewall versions. Users are advised to install the patches for optimal protection.

Firewall series	CVE-2024-6343	CVE-2024-7203	CVE-2024-42057	CVE-2024-42058	CVE-2024-42059	CVE-2024-42060	CVE-2024-42061	Patch availability
ATP	ZLD V4.32 to V5.38	ZLD V4.60 to V5.38	ZLD V4.32 to V5.38	ZLD V4.32 to V5.38	ZLD V5.00 to V5.38	ZLD V4.32 to V5.38	ZLD V4.32 to V5.38	ZLD V5.39
USG FLEX	ZLD V4.50 to V5.38	ZLD V4.60 to V5.38	ZLD V4.50 to V5.38	ZLD V4.50 to V5.38	ZLD V5.00 to V5.38	ZLD V4.50 to V5.38	ZLD V4.50 to V5.38	ZLD V5.39
USG FLEX 50(W)/USG20(W)-VPN	ZLD V4.16 to V5.38	Not affected	ZLD V4.16 to V5.38	ZLD V4.20 to V5.38	ZLD V5.00 to V5.38	ZLD V4.16 to V5.38	ZLD V4.16 to V5.38	ZLD V5.39

Vulnerabilities included in this bundle

• CVE-2024-6343: A buffer overflow vulnerability in the CGI program of Zyxel ATP series firmware versions from V4.32 through V5.38, USG F...
• CVE-2024-7203:
• CVE-2024-42057:
• CVE-2024-42058:
• CVE-2024-42059:
• CVE-2024-42060:
• CVE-2024-42061:

Author

Jean-Louis Huynen

---

Combined sightings