VulnRadar

Data against noise.

Built with NaN
Page generated: 09 Nov 2026, 10:07 UTC
← Dashboard

CVE-2023-33010

A buffer overflow vulnerability in the ID processing function in Zyxel ATP series firmware versions 4.32 through 5.36 Patch 1, USG FLEX series firmware versions 4.50 through 5.36 Patch 1, USG FLEX 50(W) firmware versions 4.25 through 5.36 Patch 1, USG20(W)-VPN firmware versions 4…

Read full description
A buffer overflow vulnerability in the ID processing function in Zyxel ATP series firmware versions 4.32 through 5.36 Patch 1, USG FLEX series firmware versions 4.50 through 5.36 Patch 1, USG FLEX 50(W) firmware versions 4.25 through 5.36 Patch 1, USG20(W)-VPN firmware versions 4.25 through 5.36 Patch 1, VPN series firmware versions 4.30 through 5.36 Patch 1, ZyWALL/USG series firmware versions 4.25 through 4.73 Patch 1, could allow an unauthenticated attacker to cause denial-of-service (DoS) conditions and even a remote code execution on an affected device.
CVSS 9.8 (CRITICAL) KEV: KNOWN CATALOG

Attention and evidence

HYPE SCORE
0.0/10
REALITY · THREAT PRIORITY
8.6/10
General review priority; not probability

Evidence confidence: Exploitation recorded

Why this priority?
  • Recorded exploitation baseline: +7.00
  • Technical severity: CVSS 9.8: +1.47
  • Fresh EPSS: 29.02%: +0.15

General review priority, not probability, victim count or asset-specific risk. A range covers missing CVSS/EPSS inputs within the current evidence state.

Sources: 13 documents and public datasets.

Hype components

Headline sample (25%)
0/100
Press, 30 days (60%)
0/100
Grounded branding (15%)
0/100
HYPE TOTAL0/100

Sources and documents

The Hacker News
Press · 16 Nov 2023, 08:00 · Russian Hackers Linked to 'Largest Ever Cyber Attack' on Danish Critical Infrastructure - The Hacker News
SecurityWeek
Press · 14 Nov 2023, 08:00 · 22 Energy Firms Hacked in Largest Coordinated Attack on Denmark’s Critical Infrastructure - SecurityWeek
TechSpot
Press · 21 Jun 2023, 07:00 · Critical security flaw discovered in Zyxel NAS devices, patches are already available - TechSpot
BleepingComputer
Press · 20 Jun 2023, 07:00 · Zyxel warns of critical command injection flaw in NAS devices - BleepingComputer
BleepingComputer
Press · 03 Jun 2023, 07:00 · Zyxel shares tips on protecting firewalls from ongoing attacks - BleepingComputer
See all 13 source documents
The Record from Recorded Future News
Press · 01 Jun 2023, 07:00 · Researchers warn of hackers widely exploiting bug in Zyxel hardware - The Record from Recorded Future News
Ars Technica
Press · 31 May 2023, 07:00 · Researchers tell owners to “assume compromise” of unpatched Zyxel firewalls - Ars Technica
Rapid7
Press · 31 May 2023, 07:00 · Widespread Exploitation of Zyxel Network Devices - Rapid7
BleepingComputer
Press · 31 May 2023, 07:00 · Hackers exploit critical Zyxel firewall flaw in ongoing attacks - BleepingComputer
TechSpot
Press · 26 May 2023, 07:00 · Zyxel firewalls affected by two new security flaws, patches must be installed ASAP - TechSpot
BleepingComputer
Press · 25 May 2023, 07:00 · Zyxel warns of critical vulnerabilities in firewall and VPN devices - BleepingComputer
The Hacker News
Press · 25 May 2023, 07:00 · Zyxel Issues Critical Security Patches for Firewall and VPN Products - The Hacker News
Arctic Wolf
Press · 24 May 2023, 07:00 · Recommendations for CVE-2023-33009 and CVE-2023-33010 - Arctic Wolf

Score evolution

● Hype   ● Reality

Earlier evidence-support scores are retained in history; this chart shows only the current priority definition.

First record: hype 0.0 · reality 8.6 (2026-11-02 15:13). The curve appears once the score changes.

Public exploit evidence

0

Public exploit entries / repo candidates

Evidence context and dated references

Reality is general threat/review priority, combining observed exploitation, CVSS severity and fresh EPSS. Evidence confidence is separate. This is not calibrated risk, a victim count or an asset-specific assessment. A range reflects missing numeric inputs.

Evidence in context

Confidence in exploitation evidence
Exploitation recorded
Priority basis
Recorded exploitation; CVSS 9.8; EPSS 29.0%
Attention, last 30 days
0 distinct story titles; 0 press documents; 0 publisher domains.
Technical potential
network access, no prior privileges, no user interaction.
Observed activity
Exploitation recorded in CISA KEV.
Known scale
Not quantified.
Evidence confidence basis
Trusted exploitation confirmation

Score evaluated: 2026-11-05 13:58:55.035007+00:00 · EPSS snapshot: 2026-11-05T12:03:04Z

Source event timeline
Published
24 May 2023, 00:00
First press mention
24 May 2023, 07:00
Added to the CISA KEV catalog
05 Jun 2023, 00:00
Latest press mention
16 Nov 2023, 08:00
Score calculated
05 Nov 2026, 13:58
Source: CVE List V5 · CISA KEV · FIRST EPSS · GitHub · RSSVulnRadar