CVSS 3.1
6.5 mediumCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HCVE-2023-28768
Medium (6.5) in zyxel. EPSS 0.3% chance of exploitation in the next 30 days.
Improper frame handling in the Zyxel XGS2220-30 firmware version V4.80(ABXN.1), XMG1930-30 firmware version V4.80(ACAR.1), and XS1930-10 firmware version V4.80(ABQE.1) could allow an unauthenticated LAN-based attacker to cause denial-of-service (DoS) conditions by sending crafted frames to an affected switch.
Severity
- EPSS
- 0.3% chance of exploitation in the next 30 days; higher than 23% of CVEs (scores of 2026-10-31)
- CWE
- CWE-755
- Published
- Modified
- Record from
- the NVD, synced
Affected
- zyxel:xgs2220-30_firmware
- zyxel:xgs2220-30f_firmware
- zyxel:xgs2220-30hp_firmware
- zyxel:xgs2220-54_firmware
- zyxel:xgs2220-54fp_firmware
- zyxel:xgs2220-54hp_firmware
- zyxel:xmg1930-30_firmware
- zyxel:xmg1930-30hp_firmware
- zyxel:xs1930-10_firmware
- zyxel:xs1930-12f_firmware
- zyxel:xs1930-12hp_firmware
References
- https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-dos-vulnerability-of-xgs2220-xmg1930-and-xs1930-series-switches
- https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-dos-vulnerability-of-xgs2220-xmg1930-and-xs1930-series-switches