CVE-2024-42057

Published Sep 3, 2024

Last updated 10 months ago

Zyxel ATP

Overview

AI description

Automated description summarized from trusted sources.

CVE-2024-42057 is a command injection vulnerability found in the IPSec VPN feature of Zyxel firewalls. It impacts Zyxel ATP series (firmware V4.32-V5.38), USG FLEX series (V4.50-V5.38), USG FLEX 50(W) series (V4.16-V5.38), and USG20(W)-VPN series (V4.16-V5.38). An unauthenticated attacker can exploit this vulnerability to execute OS commands on a vulnerable device by sending a crafted username. The vulnerability can be exploited only if the device is configured in User-Based-PSK authentication mode and a valid user with a username exceeding 28 characters exists. Zyxel has released firmware version V5.39 to address this vulnerability, and users of affected devices are advised to upgrade to the latest firmware version.

Description: A command injection vulnerability in the IPSec VPN feature of Zyxel ATP series firmware versions from V4.32 through V5.38, USG FLEX series firmware versions from V4.50 through V5.38, USG FLEX 50(W) series firmware versions from V4.16 through V5.38, and USG20(W)-VPN series firmware versions from V4.16 through V5.38 could allow an unauthenticated attacker to execute some OS commands on an affected device by sending a crafted username to the vulnerable device. Note that this attack could be successful only if the device was configured in User-Based-PSK authentication mode and a valid user with a long username exceeding 28 characters exists.
Source: security@zyxel.com.tw
NVD status: Analyzed
Products: zld

Risk scores

CVSS 3.1

Type: Primary
Base score: 8.1
Impact score: 5.9
Exploitability score: 2.2
Vector string: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Severity: HIGH

Weaknesses

security@zyxel.com.tw: CWE-78

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:zyxel:zld:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "871446C3-30E8-4FE9-AC8A-4D87A400233F",
            "versionEndExcluding": "5.39",
            "versionStartIncluding": "4.32"
          }
        ],
        "operator": "OR"
      },
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:h:zyxel:atp100:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "7F7654A1-3806-41C7-82D4-46B0CD7EE53B"
          },
          {
            "criteria": "cpe:2.3:h:zyxel:atp100w:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "47398FD0-6C5E-4625-9EFD-DE08C9AB7DB2"
          },
          {
            "criteria": "cpe:2.3:h:zyxel:atp200:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "D68A36FF-8CAF-401C-9F18-94F3A2405CF4"
          },
          {
            "criteria": "cpe:2.3:h:zyxel:atp500:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "2818E8AC-FFEE-4DF9-BF3F-C75166C0E851"
          },
          {
            "criteria": "cpe:2.3:h:zyxel:atp700:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "0B41F437-855B-4490-8011-DF59887BE6D5"
          },
          {
            "criteria": "cpe:2.3:h:zyxel:atp800:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "66B99746-0589-46E6-9CBD-F38619AD97DC"
          }
        ],
        "operator": "OR"
      }
    ],
    "operator": "AND"
  },
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:zyxel:zld:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "4240E15F-8869-4DA7-9F6E-5DAF3708F9A7",
            "versionEndExcluding": "5.39",
            "versionStartIncluding": "4.50"
          }
        ],
        "operator": "OR"
      },
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:h:zyxel:usg_flex_100:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "2B30A4C0-9928-46AD-9210-C25656FB43FB"
          },
          {
            "criteria": "cpe:2.3:h:zyxel:usg_flex_100ax:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "03036815-04AE-4E39-8310-DA19A32CFA48"
          },
          {
            "criteria": "cpe:2.3:h:zyxel:usg_flex_100w:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "D74ABA7E-AA78-4A13-A64E-C44021591B42"
          },
          {
            "criteria": "cpe:2.3:h:zyxel:usg_flex_200:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "F93B6A06-2951-46D2-A7E1-103D7318D612"
          },
          {
            "criteria": "cpe:2.3:h:zyxel:usg_flex_50:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "646C1F07-B553-47B0-953B-DC7DE7FD0F8B"
          },
          {
            "criteria": "cpe:2.3:h:zyxel:usg_flex_500:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "92C697A5-D1D3-4FF0-9C43-D27B18181958"
          },
          {
            "criteria": "cpe:2.3:h:zyxel:usg_flex_700:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "9D1396E3-731B-4D05-A3F8-F3ABB80D5C29"
          }
        ],
        "operator": "OR"
      }
    ],
    "operator": "AND"
  },
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:zyxel:zld:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "A2C43DB2-3339-4FB1-AC44-56619A9DDAA0",
            "versionEndExcluding": "5.39",
            "versionStartIncluding": "4.16"
          }
        ],
        "operator": "OR"
      },
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:h:zyxel:usg_flex_50w:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "110A1CA4-0170-4834-8281-0A3E14FC5584"
          }
        ],
        "operator": "OR"
      }
    ],
    "operator": "AND"
  },
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:zyxel:zld:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "A2C43DB2-3339-4FB1-AC44-56619A9DDAA0",
            "versionEndExcluding": "5.39",
            "versionStartIncluding": "4.16"
          }
        ],
        "operator": "OR"
      },
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:h:zyxel:usg_20w-vpn:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "6BEA412F-3DA1-4E91-9C74-0666147DABCE"
          }
        ],
        "operator": "OR"
      }
    ],
    "operator": "AND"
  }
]

References

Sources include official advisories and independent security research.