CVE-2024-6343: 
NixOS vulnerability analysis and mitigation

A buffer overflow vulnerability was discovered in Zyxel's CGI program affecting multiple firewall series. The vulnerability (CVE-2024-6343) impacts ATP series firmware versions V4.32-V5.38, USG FLEX series firmware versions V4.50-V5.38, USG FLEX 50(W) series firmware versions V4.16-V5.38, and USG20(W)-VPN series firmware versions V4.16-V5.38 (Vendor Advisory).

The vulnerability is classified as a buffer overflow in the CGI program of affected Zyxel firewall devices. It has been assigned a CVSS v3.1 Base Score of 4.9 (Medium) with the vector string CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H. The vulnerability is tracked under CWE-120 (Buffer Copy without Checking Size of Input) (NVD).

When successfully exploited, this vulnerability could allow an authenticated attacker with administrator privileges to cause denial of service (DoS) conditions on the affected device (Vendor Advisory).

Zyxel has released patch version ZLD V5.39 to address this vulnerability. Users of affected devices are advised to upgrade their firmware to this latest version for optimal protection (Vendor Advisory).

The vulnerability was discovered and reported by security researchers Nanyu Zhong and Jinwei Dong from VARAS@IIE (Vendor Advisory).