VULNERABILITY INTELLIGENCE

CVE-2023-5960

CVSS score5.5 MEDIUM
EPSS probability0.22%
CISA KEVNot currently listed
Published2023-11-28
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Description

An improper privilege management vulnerability in the hotspot feature of the Zyxel USG FLEX series firmware versions 4.50 through 5.37 and VPN series firmware versions 4.30 through 5.37 could allow an authenticated local attacker to access the system files on an affected device.

Weakness classification

  • CWE-269: Improper Privilege Management

Primary references