This vulnerability resides in the ID processing function of the same list of Zyxel firmware versions. Its sinister twin, CVE-2023-33010, presents a parallel threat. The firmware versions susceptible to this vulnerability are found within Zyxel’s ATP, USG FLEX, VPN, and ZyWALL/USG series. This security flaw, if exploited, could grant an unauthenticated assailant the power to induce a denial-of-service (DoS) condition or even execute remote code on the targeted device.

In the vortex of this digital storm, CVE-2023-33009 reveals itself as a buffer overflow vulnerability lurking within the notification function of numerous Zyxel firmware versions. This figure, precariously perched on the high end of the severity scale, is indicative of the potential mayhem these vulnerabilities could wreak if left unchecked. The vulnerabilities, assigned the labels CVE-2023-33009 and CVE-2023-33010, both carry an alarming Common Vulnerability Scoring System (CVSS) score of 9.8. Disable Windows 10 Defender Virus and Threat Protection

Zywall usg20