CVE:CVE-2023-27990
CNNVD:CNNVD-202304-1972
Zyxel ATP是中国合勤（Zyxel）公司的一款防火墙。
多款Zyxel产品存在安全漏洞。攻击者利用该漏洞执行跨站脚本攻击。以下产品及版本受到影响：Zyxel ATP 4.32版本至5.35版本、USG FLEX 4.50版本至5.35版本、USG FLEX 50(W) 4.16版本至5.35版本、USG20(W)-VPN 4.16版本至5.35版本、VPN 4.30版本至5.35版本。
solution:Upgrade zyxel atp200_firmware to a higher version than 5.36,and avoid the version [4.32,5.36); Upgrade zyxel atp100_firmware to a higher version than 5.36,and avoid the version [4.32,5.36); Upgrade zyxel atp700_firmware to a higher version than 5.36,and avoid the version [4.32,5.36); Upgrade zyxel atp500_firmware to a higher version than 5.36,and avoid the version [4.32,5.36); Upgrade zyxel atp100w_firmware to a higher version than 5.36,and avoid the version [4.32,5.36); Upgrade zyxel atp800_firmware to a higher version than 5.36,and avoid the version [4.32,5.36); Upgrade zyxel usg_flex_100_firmware to a higher version than 5.36,and avoid the version [4.50,5.36); Upgrade zyxel usg_flex_50_firmware to a higher version than 5.36,and avoid the version [4.50,5.36); Upgrade zyxel usg_flex_200_firmware to a higher version than 5.36,and avoid the version [4.50,5.36); Upgrade zyxel usg_flex_500_firmware to a higher version than 5.36,and avoid the version [4.50,5.36); Upgrade zyxel usg_flex_700_firmware to a higher version than 5.36,and avoid the version [4.50,5.36); Upgrade zyxel usg_flex_100w_firmware to a higher version than 5.36,and avoid the version [4.50,5.36); Upgrade zyxel usg_20w-vpn_firmware to a higher version than 5.36,and avoid the version [4.16,5.36); Upgrade zyxel usg_flex_50w_firmware to a higher version than 5.36,and avoid the version [4.16,5.36); Upgrade zyxel usg20-vpn_firmware to a higher version than 5.36,and avoid the version [4.30,5.36); Upgrade zyxel vpn100_firmware to a higher version than 5.36,and avoid the version [4.30,5.36); Upgrade zyxel vpn1000_firmware to a higher version than 5.36,and avoid the version [4.30,5.36); Upgrade zyxel vpn300_firmware to a higher version than 5.36,and avoid the version [4.30,5.36); Upgrade zyxel vpn50_firmware to a higher version than 5.36,and avoid the version [4.30,5.36)