CVE-2023-28768: zyxel xgs2220-30 firmware +10 lainnya

csirt@kutim:~/threat-intel/cve/CVE-2023-28768

CVSS 6.5 · Medium EPSS 0,30%

Kerentanan Improper Handling of Exceptional Conditions pada zyxel xgs2220-30 firmware, zyxel xgs2220-30f firmware +9 lainnya. Skor CVSS 3.1 6.5 (Medium) menurut zyxel.com.tw.

Deskripsi (NVD)

Improper frame handling in the Zyxel XGS2220-30 firmware version V4.80(ABXN.1), XMG1930-30 firmware version V4.80(ACAR.1), and XS1930-10 firmware version V4.80(ABQE.1) could allow an unauthenticated LAN-based attacker to cause denial-of-service (DoS) conditions by sending crafted frames to an affected switch.

Rincian

Terbit di NVD: 14 Agustus 2023
Terakhir diubah: 17 Juni 2026
Status NVD: Modified
CVSS 3.1: 6.5 (Medium), sumber zyxel.com.tw
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator
Jenis kelemahan (CWE): CWE-755: Improper Handling of Exceptional Conditions
EPSS (30 hari): 0,30% peluang dieksploitasi; lebih tinggi dari 21,3% CVE lain

Produk dan versi terdampak

Vendor	Produk	Versi terdampak
zyxel	xgs2220-30 firmware	Versi 4.80(abxn.1)
zyxel	xgs2220-30f firmware	Versi 4.80(abye.1)
zyxel	xgs2220-30hp firmware	Versi 4.80(abxo.1)
zyxel	xgs2220-54 firmware	Versi 4.80(abxp.1)
zyxel	xgs2220-54fp firmware	Versi 4.80(acce.1)
zyxel	xgs2220-54hp firmware	Versi 4.80(abxq.1)
zyxel	xmg1930-30 firmware	Versi 4.80(acar.1)
zyxel	xmg1930-30hp firmware	Versi 4.80(acas.1)
zyxel	xs1930-10 firmware	Versi 4.80(abqe.1)
zyxel	xs1930-12f firmware	Versi 4.80(abzv.1)
zyxel	xs1930-12hp firmware	Versi 4.80(abqf.1)

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-dos-vulnerability-of-x... patch · advisory vendor

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.