What’s Vulnerable › Vulnerabilities

CVE-2023-28768

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-08-14 · updated 2026-06-17
• Weakness: CWE-755

Description

Improper frame handling in the Zyxel XGS2220-30 firmware version V4.80(ABXN.1), XMG1930-30 firmware version V4.80(ACAR.1), and XS1930-10 firmware version V4.80(ABQE.1) could allow an unauthenticated LAN-based attacker to cause denial-of-service (DoS) conditions by sending crafted frames to an affected switch.

Affected products

• Zyxel XGS2220-30 firmware: 4.80(abxn.1)
• Zyxel Xgs2220-30F Firmware: 4.80(abye.1)
• Zyxel Xgs2220-30Hp Firmware: 4.80(abxo.1)
• Zyxel Xgs2220-54 Firmware: 4.80(abxp.1)
• Zyxel Xgs2220-54Fp Firmware: 4.80(acce.1)
• Zyxel Xgs2220-54Hp Firmware: 4.80(abxq.1)
• Zyxel XMG1930-30 firmware: 4.80(acar.1)
• Zyxel Xmg1930-30Hp Firmware: 4.80(acas.1)
• Zyxel XS1930-10 firmware: 4.80(abqe.1)
• Zyxel Xs1930-12F Firmware: 4.80(abzv.1)
• Zyxel Xs1930-12Hp Firmware: 4.80(abqf.1)

References

• https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-dos-vulnerability-of-xgs2220-xmg1930-and-xs1930-series-switches
• https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-dos-vulnerability-of-xgs2220-xmg1930-and-xs1930-series-switches

Get alerted when CVE-2023-28768 or the next vulnerability affects your stack