Vulnerabilites related to zyxel - ex3600-t0
cve-2024-8748
Vulnerability from cvelistv5
Published
2024-12-03 01:15
Modified
2024-12-03 16:31
Severity ?
EPSS score ?
Summary
A buffer overflow vulnerability in the packet parser of the third-party library "libclinkc" in Zyxel VMG8825-T50K firmware versions through V5.50(ABOM.8.4)C0 could allow an attacker to cause a temporary denial of service (DoS) condition against the web management interface by sending a crafted HTTP POST request to a vulnerable device.
References
Impacted products
| Vendor | Product | Version | ||
|---|---|---|---|---|
| Zyxel | VMG8825-T50K firmware |
Version: <= V5.50(ABOM.8.4)C0 |
{ containers: { adp: [ { affected: [ { cpes: [ "cpe:2.3:o:zyxel:vmg8825-t50k_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "vmg8825-t50k_firmware", vendor: "zyxel", versions: [ { lessThanOrEqual: "5.50\\(abom.8.4\\)c0", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:zyxel:lte3301-plus_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "lte3301-plus_firmware", vendor: "zyxel", versions: [ { lessThanOrEqual: "1.00\\(abqu.5\\)c0", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:zyxel:lte5388-m804_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "lte5388-m804_firmware", vendor: "zyxel", versions: [ { lessThanOrEqual: "1.00\\(absq.4\\)c0", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:zyxel:lte5398-m904_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "lte5398-m904_firmware", vendor: "zyxel", versions: [ { lessThanOrEqual: "1.00\\(abqv.4\\)c0", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:zyxel:lte7480-m804_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "lte7480-m804_firmware", vendor: "zyxel", versions: [ { lessThanOrEqual: "1.00\\(abra.9\\)c0", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:zyxel:lte7490-m904_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "lte7490-m904_firmware", vendor: "zyxel", versions: [ { lessThanOrEqual: "1.00\\(abqy.8\\)c0", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:zyxel:nr7101_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "nr7101_firmware", vendor: "zyxel", versions: [ { lessThanOrEqual: "1.00\\(abuv.10\\)c0", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:zyxel:nr7102_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "nr7102_firmware", vendor: "zyxel", versions: [ { lessThanOrEqual: "v1.00\\(abyd.3\\)c0", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:zyxel:nebula_nr5101_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "nebula_nr5101_firmware", vendor: "zyxel", versions: [ { lessThan: "1.16\\(accg.0\\)c0", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:zyxel:nebula_nr7101_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "nebula_nr7101_firmware", vendor: "zyxel", versions: [ { lessThanOrEqual: "1.16\\(accc.0\\)c0", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:zyxel:nebula_lte3301-plus_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "nebula_lte3301-plus_firmware", vendor: "zyxel", versions: [ { lessThanOrEqual: "1.18\\(acca.4\\)c0", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:zyxel:dx3300-t0_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "dx3300-t0_firmware", vendor: "zyxel", versions: [ { lessThanOrEqual: "5.50\\(abvy.5.3\\)c0", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:zyxel:dx3300-t1_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "dx3300-t1_firmware", vendor: "zyxel", versions: [ { lessThanOrEqual: "5.50(abvy.5.3)c0", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:zyxel:dx3301-t0_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "dx3301-t0_firmware", vendor: "zyxel", versions: [ { lessThanOrEqual: "5.50\\(abvy.5.3\\)c0", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:zyxel:dx4510-b0_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "dx4510-b0_firmware", vendor: "zyxel", versions: [ { lessThanOrEqual: "5.17\\(abyl.7\\)c0", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:zyxel:dx4510-b1_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "dx4510-b1_firmware", vendor: "zyxel", versions: [ { lessThanOrEqual: "5.17\\(abyl.7\\)c0", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:zyxel:dx5401-b0_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "dx5401-b0_firmware", vendor: "zyxel", versions: [ { lessThanOrEqual: "5.17\\(abyo.6.3\\)c0", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:zyxel:dx5401_b1_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "dx5401_b1_firmware", vendor: "zyxel", versions: [ { lessThanOrEqual: "5.17\\(abyo.6.3\\)c0", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:zyxel:ee6510-10_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "ee6510-10_firmware", vendor: "zyxel", versions: [ { lessThanOrEqual: "5.19\\(acjq.0\\)c0", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:zyxel:ex2210-t0_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "ex2210-t0_firmware", vendor: "zyxel", versions: [ { lessThanOrEqual: "5.50\\(acdi.1\\)c0", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:zyxel:wx3100-t0_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "wx3100-t0_firmware", vendor: "zyxel", versions: [ { lessThanOrEqual: "5.50\\(abvl.4.3\\)c0", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:zyxel:wx3401-b0_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "wx3401-b0_firmware", vendor: "zyxel", versions: [ { lessThanOrEqual: "5.17\\(abve.2.5\\)c0", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:zyxel:wx3401-b1_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "wx3401-b1_firmware", vendor: "zyxel", versions: [ { lessThanOrEqual: "5.17(abve.2.5)c0", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:zyxel:wx5600-t0_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "wx5600-t0_firmware", vendor: "zyxel", versions: [ { lessThanOrEqual: "5.70\\(aceb.3.2\\)c0", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:zyxel:wx5610-b0_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "wx5610-b0_firmware", vendor: "zyxel", versions: [ { lessThanOrEqual: "5.18\\(acgj.0\\)c2", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:zyxel:ax7501-b0_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "ax7501-b0_firmware", vendor: "zyxel", versions: [ { lessThanOrEqual: "5.17\\(abpc.5.2\\)c0", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:zyxel:ax7501-b1_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "ax7501-b1_firmware", vendor: "zyxel", versions: [ { lessThanOrEqual: "5.17\\(abpc.5.2\\)c0", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:zyxel:pm3100-t0_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "pm3100-t0_firmware", vendor: "zyxel", versions: [ { lessThanOrEqual: "5.42(acbf.2.1)c0", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:zyxel:pm5100-t0_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "pm5100-t0_firmware", vendor: "zyxel", versions: [ { lessThanOrEqual: "5.42\\(acbf.2.1\\)c0", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:zyxel:pm7300-t0_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "pm7300-t0_firmware", vendor: "zyxel", versions: [ { lessThanOrEqual: "5.42\\(abyy.2.2\\)c0", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:zyxel:pm7500-t0_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "pm7500-t0_firmware", vendor: "zyxel", versions: [ { lessThanOrEqual: "5.61\\(ackk.0\\)c0", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:zyxel:px3321-t1_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "px3321-t1_firmware", vendor: "zyxel", versions: [ { lessThanOrEqual: "5.44\\(acjb.1\\)c0", status: "affected", version: "0", versionType: "custom", }, { lessThanOrEqual: "5.44\\(achk.0.2\\)c0", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:zyxel:px5301-t0_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "px5301-t0_firmware", vendor: "zyxel", versions: [ { lessThanOrEqual: "5.44\\(ackb.0\\)c0", status: "affected", version: "0", versionType: "custom", }, ], }, ], metrics: [ { other: { content: { id: "CVE-2024-8748", options: [ { Exploitation: "none", }, { Automatable: "yes", }, { "Technical Impact": "partial", }, ], role: "CISA Coordinator", timestamp: "2024-12-03T14:40:11.917455Z", version: "2.0.3", }, type: "ssvc", }, }, ], providerMetadata: { dateUpdated: "2024-12-03T16:31:58.508Z", orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0", shortName: "CISA-ADP", }, title: "CISA ADP Vulnrichment", }, ], cna: { affected: [ { defaultStatus: "unaffected", product: "VMG8825-T50K firmware", vendor: "Zyxel", versions: [ { status: "affected", version: "<= V5.50(ABOM.8.4)C0", }, ], }, ], descriptions: [ { lang: "en", supportingMedia: [ { base64: false, type: "text/html", value: "A buffer overflow vulnerability in the packet parser of the third-party library \"libclinkc\" in Zyxel VMG8825-T50K firmware versions through V5.50(ABOM.8.4)C0 could allow an attacker to cause a temporary denial of service (DoS) condition against the web management interface by sending a crafted HTTP POST request to a vulnerable device.", }, ], value: "A buffer overflow vulnerability in the packet parser of the third-party library \"libclinkc\" in Zyxel VMG8825-T50K firmware versions through V5.50(ABOM.8.4)C0 could allow an attacker to cause a temporary denial of service (DoS) condition against the web management interface by sending a crafted HTTP POST request to a vulnerable device.", }, ], metrics: [ { cvssV3_1: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", version: "3.1", }, format: "CVSS", scenarios: [ { lang: "en", value: "GENERAL", }, ], }, ], problemTypes: [ { descriptions: [ { cweId: "CWE-120", description: "CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')", lang: "en", type: "CWE", }, ], }, ], providerMetadata: { dateUpdated: "2024-12-03T01:34:18.062Z", orgId: "96e50032-ad0d-4058-a115-4d2c13821f9f", shortName: "Zyxel", }, references: [ { tags: [ "vendor-advisory", ], url: "https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-buffer-overflow-and-post-authentication-command-injection-vulnerabilities-in-some-4g-lte-5g-nr-cpe-dsl-ethernet-cpe-fiber-onts-and-wifi-extenders-12-03-2024", }, ], source: { discovery: "UNKNOWN", }, x_generator: { engine: "Vulnogram 0.2.0", }, }, }, cveMetadata: { assignerOrgId: "96e50032-ad0d-4058-a115-4d2c13821f9f", assignerShortName: "Zyxel", cveId: "CVE-2024-8748", datePublished: "2024-12-03T01:15:46.610Z", dateReserved: "2024-09-12T07:51:38.916Z", dateUpdated: "2024-12-03T16:31:58.508Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", }
cve-2024-38268
Vulnerability from cvelistv5
Published
2024-09-24 01:35
Modified
2024-09-24 15:37
Severity ?
EPSS score ?
Summary
An improper restriction of operations within the bounds of a memory buffer in the MAC address parser of the Zyxel VMG8825-T50K firmware versions through 5.50(ABOM.8)C0 could allow an authenticated attacker with administrator privileges to cause potential memory corruptions, resulting in a thread crash on an affected device.
References
Impacted products
| Vendor | Product | Version | ||
|---|---|---|---|---|
| Zyxel | VMG8825-T50K firmware |
Version: <= 5.50(ABOM.8)C0 |
{ containers: { adp: [ { metrics: [ { other: { content: { id: "CVE-2024-38268", options: [ { Exploitation: "none", }, { Automatable: "no", }, { "Technical Impact": "partial", }, ], role: "CISA Coordinator", timestamp: "2024-09-24T15:37:47.983578Z", version: "2.0.3", }, type: "ssvc", }, }, ], providerMetadata: { dateUpdated: "2024-09-24T15:37:58.810Z", orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0", shortName: "CISA-ADP", }, title: "CISA ADP Vulnrichment", }, ], cna: { affected: [ { defaultStatus: "unaffected", product: "VMG8825-T50K firmware", vendor: "Zyxel", versions: [ { status: "affected", version: "<= 5.50(ABOM.8)C0", }, ], }, ], descriptions: [ { lang: "en", supportingMedia: [ { base64: false, type: "text/html", value: "An improper restriction of operations within the bounds of a memory buffer in the MAC address parser of the Zyxel VMG8825-T50K firmware versions through 5.50(ABOM.8)C0 could allow an authenticated attacker with administrator privileges to cause potential memory corruptions, resulting in a thread crash on an affected device.", }, ], value: "An improper restriction of operations within the bounds of a memory buffer in the MAC address parser of the Zyxel VMG8825-T50K firmware versions through 5.50(ABOM.8)C0 could allow an authenticated attacker with administrator privileges to cause potential memory corruptions, resulting in a thread crash on an affected device.", }, ], metrics: [ { cvssV3_1: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 4.9, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "HIGH", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", version: "3.1", }, format: "CVSS", scenarios: [ { lang: "en", value: "GENERAL", }, ], }, ], problemTypes: [ { descriptions: [ { cweId: "CWE-119", description: "CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer", lang: "en", type: "CWE", }, ], }, ], providerMetadata: { dateUpdated: "2024-09-24T01:35:22.675Z", orgId: "96e50032-ad0d-4058-a115-4d2c13821f9f", shortName: "Zyxel", }, references: [ { tags: [ "vendor-advisory", ], url: "https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-post-authentication-memory-corruption-vulnerabilities-in-some-dsl-ethernet-cpe-fiber-ont-wifi-extender-and-security-router-versions-09-24-2024", }, ], source: { discovery: "UNKNOWN", }, x_generator: { engine: "Vulnogram 0.2.0", }, }, }, cveMetadata: { assignerOrgId: "96e50032-ad0d-4058-a115-4d2c13821f9f", assignerShortName: "Zyxel", cveId: "CVE-2024-38268", datePublished: "2024-09-24T01:35:22.675Z", dateReserved: "2024-06-12T09:11:12.898Z", dateUpdated: "2024-09-24T15:37:58.810Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", }
cve-2024-38269
Vulnerability from cvelistv5
Published
2024-09-24 01:38
Modified
2024-09-24 13:43
Severity ?
EPSS score ?
Summary
An improper restriction of operations within the bounds of a memory buffer in the USB file-sharing handler of the Zyxel VMG8825-T50K firmware versions through 5.50(ABOM.8)C0 could allow an authenticated attacker with administrator privileges to cause potential memory corruptions, resulting in a thread crash on an affected device.
References
Impacted products
| Vendor | Product | Version | ||
|---|---|---|---|---|
| Zyxel | VMG8825-T50K firmware |
Version: <= 5.50(ABOM.8)C0 |
{ containers: { adp: [ { metrics: [ { other: { content: { id: "CVE-2024-38269", options: [ { Exploitation: "none", }, { Automatable: "no", }, { "Technical Impact": "partial", }, ], role: "CISA Coordinator", timestamp: "2024-09-24T13:20:29.913175Z", version: "2.0.3", }, type: "ssvc", }, }, ], providerMetadata: { dateUpdated: "2024-09-24T13:43:24.309Z", orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0", shortName: "CISA-ADP", }, title: "CISA ADP Vulnrichment", }, ], cna: { affected: [ { defaultStatus: "unaffected", product: "VMG8825-T50K firmware", vendor: "Zyxel", versions: [ { status: "affected", version: "<= 5.50(ABOM.8)C0", }, ], }, ], descriptions: [ { lang: "en", supportingMedia: [ { base64: false, type: "text/html", value: "An improper restriction of operations within the bounds of a memory buffer in the USB file-sharing handler of the Zyxel VMG8825-T50K firmware versions through 5.50(ABOM.8)C0 could allow an authenticated attacker with administrator privileges to cause potential memory corruptions, resulting in a thread crash on an affected device.", }, ], value: "An improper restriction of operations within the bounds of a memory buffer in the USB file-sharing handler of the Zyxel VMG8825-T50K firmware versions through 5.50(ABOM.8)C0 could allow an authenticated attacker with administrator privileges to cause potential memory corruptions, resulting in a thread crash on an affected device.", }, ], metrics: [ { cvssV3_1: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 4.9, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "HIGH", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", version: "3.1", }, format: "CVSS", scenarios: [ { lang: "en", value: "GENERAL", }, ], }, ], problemTypes: [ { descriptions: [ { cweId: "CWE-119", description: "CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer", lang: "en", type: "CWE", }, ], }, ], providerMetadata: { dateUpdated: "2024-09-24T01:38:14.149Z", orgId: "96e50032-ad0d-4058-a115-4d2c13821f9f", shortName: "Zyxel", }, references: [ { tags: [ "vendor-advisory", ], url: "https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-post-authentication-memory-corruption-vulnerabilities-in-some-dsl-ethernet-cpe-fiber-ont-wifi-extender-and-security-router-versions-09-24-2024", }, ], source: { discovery: "UNKNOWN", }, x_generator: { engine: "Vulnogram 0.2.0", }, }, }, cveMetadata: { assignerOrgId: "96e50032-ad0d-4058-a115-4d2c13821f9f", assignerShortName: "Zyxel", cveId: "CVE-2024-38269", datePublished: "2024-09-24T01:38:14.149Z", dateReserved: "2024-06-12T09:11:12.898Z", dateUpdated: "2024-09-24T13:43:24.309Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", }
cve-2024-38266
Vulnerability from cvelistv5
Published
2024-09-24 01:26
Modified
2024-09-24 15:40
Severity ?
EPSS score ?
Summary
An improper restriction of operations within the bounds of a memory buffer in the parameter type parser of the Zyxel VMG8825-T50K firmware versions through 5.50(ABOM.8)C0 could allow an authenticated attacker with administrator privileges to cause potential memory corruptions, resulting in a thread crash on an affected device.
References
Impacted products
| Vendor | Product | Version | ||
|---|---|---|---|---|
| Zyxel | VMG8825-T50K firmware |
Version: <= 5.50(ABOM.8)C0 |
{ containers: { adp: [ { metrics: [ { other: { content: { id: "CVE-2024-38266", options: [ { Exploitation: "none", }, { Automatable: "no", }, { "Technical Impact": "partial", }, ], role: "CISA Coordinator", timestamp: "2024-09-24T15:40:20.411880Z", version: "2.0.3", }, type: "ssvc", }, }, ], providerMetadata: { dateUpdated: "2024-09-24T15:40:29.933Z", orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0", shortName: "CISA-ADP", }, title: "CISA ADP Vulnrichment", }, ], cna: { affected: [ { defaultStatus: "unaffected", product: "VMG8825-T50K firmware", vendor: "Zyxel", versions: [ { status: "affected", version: "<= 5.50(ABOM.8)C0", }, ], }, ], descriptions: [ { lang: "en", supportingMedia: [ { base64: false, type: "text/html", value: "An improper restriction of operations within the bounds of a memory buffer in the parameter type parser of the Zyxel VMG8825-T50K firmware versions through 5.50(ABOM.8)C0 could allow an authenticated attacker with administrator privileges to cause potential memory corruptions, resulting in a thread crash on an affected device.", }, ], value: "An improper restriction of operations within the bounds of a memory buffer in the parameter type parser of the Zyxel VMG8825-T50K firmware versions through 5.50(ABOM.8)C0 could allow an authenticated attacker with administrator privileges to cause potential memory corruptions, resulting in a thread crash on an affected device.", }, ], metrics: [ { cvssV3_1: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 4.9, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "HIGH", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", version: "3.1", }, format: "CVSS", scenarios: [ { lang: "en", value: "GENERAL", }, ], }, ], problemTypes: [ { descriptions: [ { cweId: "CWE-119", description: "CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer", lang: "en", type: "CWE", }, ], }, ], providerMetadata: { dateUpdated: "2024-09-24T01:31:17.590Z", orgId: "96e50032-ad0d-4058-a115-4d2c13821f9f", shortName: "Zyxel", }, references: [ { tags: [ "vendor-advisory", ], url: "https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-post-authentication-memory-corruption-vulnerabilities-in-some-dsl-ethernet-cpe-fiber-ont-wifi-extender-and-security-router-versions-09-24-2024", }, ], source: { discovery: "UNKNOWN", }, x_generator: { engine: "Vulnogram 0.2.0", }, }, }, cveMetadata: { assignerOrgId: "96e50032-ad0d-4058-a115-4d2c13821f9f", assignerShortName: "Zyxel", cveId: "CVE-2024-38266", datePublished: "2024-09-24T01:26:31.998Z", dateReserved: "2024-06-12T09:11:12.898Z", dateUpdated: "2024-09-24T15:40:29.933Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", }
cve-2024-38267
Vulnerability from cvelistv5
Published
2024-09-24 01:30
Modified
2024-09-24 15:38
Severity ?
EPSS score ?
Summary
An improper restriction of operations within the bounds of a memory buffer in the IPv6 address parser of the Zyxel VMG8825-T50K firmware versions through 5.50(ABOM.8)C0 could allow an authenticated attacker with administrator privileges to cause potential memory corruptions, resulting in a thread crash on an affected device.
References
Impacted products
| Vendor | Product | Version | ||
|---|---|---|---|---|
| Zyxel | VMG8825-T50K firmware |
Version: <= 5.50(ABOM.8)C0 |
{ containers: { adp: [ { metrics: [ { other: { content: { id: "CVE-2024-38267", options: [ { Exploitation: "none", }, { Automatable: "no", }, { "Technical Impact": "partial", }, ], role: "CISA Coordinator", timestamp: "2024-09-24T15:38:26.579798Z", version: "2.0.3", }, type: "ssvc", }, }, ], providerMetadata: { dateUpdated: "2024-09-24T15:38:34.787Z", orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0", shortName: "CISA-ADP", }, title: "CISA ADP Vulnrichment", }, ], cna: { affected: [ { defaultStatus: "unaffected", product: "VMG8825-T50K firmware", vendor: "Zyxel", versions: [ { status: "affected", version: "<= 5.50(ABOM.8)C0", }, ], }, ], descriptions: [ { lang: "en", supportingMedia: [ { base64: false, type: "text/html", value: "An improper restriction of operations within the bounds of a memory buffer in the IPv6 address parser of the Zyxel VMG8825-T50K firmware versions through 5.50(ABOM.8)C0 could allow an authenticated attacker with administrator privileges to cause potential memory corruptions, resulting in a thread crash on an affected device.", }, ], value: "An improper restriction of operations within the bounds of a memory buffer in the IPv6 address parser of the Zyxel VMG8825-T50K firmware versions through 5.50(ABOM.8)C0 could allow an authenticated attacker with administrator privileges to cause potential memory corruptions, resulting in a thread crash on an affected device.", }, ], metrics: [ { cvssV3_1: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 4.9, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "HIGH", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", version: "3.1", }, format: "CVSS", scenarios: [ { lang: "en", value: "GENERAL", }, ], }, ], problemTypes: [ { descriptions: [ { cweId: "CWE-119", description: "CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer", lang: "en", type: "CWE", }, ], }, ], providerMetadata: { dateUpdated: "2024-09-24T01:30:45.720Z", orgId: "96e50032-ad0d-4058-a115-4d2c13821f9f", shortName: "Zyxel", }, references: [ { tags: [ "vendor-advisory", ], url: "https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-post-authentication-memory-corruption-vulnerabilities-in-some-dsl-ethernet-cpe-fiber-ont-wifi-extender-and-security-router-versions-09-24-2024", }, ], source: { discovery: "UNKNOWN", }, x_generator: { engine: "Vulnogram 0.2.0", }, }, }, cveMetadata: { assignerOrgId: "96e50032-ad0d-4058-a115-4d2c13821f9f", assignerShortName: "Zyxel", cveId: "CVE-2024-38267", datePublished: "2024-09-24T01:30:45.720Z", dateReserved: "2024-06-12T09:11:12.898Z", dateUpdated: "2024-09-24T15:38:34.787Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", }
cve-2024-9197
Vulnerability from cvelistv5
Published
2024-12-03 01:24
Modified
2024-12-03 16:48
Severity ?
EPSS score ?
Summary
A post-authentication buffer overflow vulnerability in the parameter "action" of the CGI program in Zyxel VMG3625-T50B firmware versions through V5.50(ABPM.9.2)C0 could allow an authenticated attacker with administrator privileges to cause a temporary denial of service (DoS) condition against the web management interface by sending a crafted HTTP GET request to a vulnerable device if the function ZyEE is enabled.
References
Impacted products
| Vendor | Product | Version | ||
|---|---|---|---|---|
| Zyxel | VMG3625-T50B firmware |
Version: <= V5.50(ABPM.9.2)C0 |
{ containers: { adp: [ { metrics: [ { other: { content: { id: "CVE-2024-9197", options: [ { Exploitation: "none", }, { Automatable: "no", }, { "Technical Impact": "partial", }, ], role: "CISA Coordinator", timestamp: "2024-12-03T16:47:51.954725Z", version: "2.0.3", }, type: "ssvc", }, }, ], providerMetadata: { dateUpdated: "2024-12-03T16:48:00.520Z", orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0", shortName: "CISA-ADP", }, title: "CISA ADP Vulnrichment", }, ], cna: { affected: [ { defaultStatus: "unaffected", product: "VMG3625-T50B firmware", vendor: "Zyxel", versions: [ { status: "affected", version: "<= V5.50(ABPM.9.2)C0", }, ], }, ], descriptions: [ { lang: "en", supportingMedia: [ { base64: false, type: "text/html", value: "A post-authentication buffer overflow vulnerability in the parameter \"action\" of the CGI program in Zyxel VMG3625-T50B firmware versions through V5.50(ABPM.9.2)C0 could allow an authenticated attacker with administrator privileges to cause a temporary denial of service (DoS) condition against the web management interface by sending a crafted HTTP GET request to a vulnerable device if the function ZyEE is enabled.", }, ], value: "A post-authentication buffer overflow vulnerability in the parameter \"action\" of the CGI program in Zyxel VMG3625-T50B firmware versions through V5.50(ABPM.9.2)C0 could allow an authenticated attacker with administrator privileges to cause a temporary denial of service (DoS) condition against the web management interface by sending a crafted HTTP GET request to a vulnerable device if the function ZyEE is enabled.", }, ], metrics: [ { cvssV3_1: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 4.9, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "HIGH", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", version: "3.1", }, format: "CVSS", scenarios: [ { lang: "en", value: "GENERAL", }, ], }, ], problemTypes: [ { descriptions: [ { cweId: "CWE-120", description: "CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')", lang: "en", type: "CWE", }, ], }, ], providerMetadata: { dateUpdated: "2024-12-03T01:35:12.028Z", orgId: "96e50032-ad0d-4058-a115-4d2c13821f9f", shortName: "Zyxel", }, references: [ { tags: [ "vendor-advisory", ], url: "https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-buffer-overflow-and-post-authentication-command-injection-vulnerabilities-in-some-4g-lte-5g-nr-cpe-dsl-ethernet-cpe-fiber-onts-and-wifi-extenders-12-03-2024", }, ], source: { discovery: "UNKNOWN", }, x_generator: { engine: "Vulnogram 0.2.0", }, }, }, cveMetadata: { assignerOrgId: "96e50032-ad0d-4058-a115-4d2c13821f9f", assignerShortName: "Zyxel", cveId: "CVE-2024-9197", datePublished: "2024-12-03T01:24:36.983Z", dateReserved: "2024-09-26T02:20:02.424Z", dateUpdated: "2024-12-03T16:48:00.520Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", }
Vulnerability from fkie_nvd
Published
2024-09-24 02:15
Modified
2024-09-30 15:52
Severity ?
Summary
An improper restriction of operations within the bounds of a memory buffer in the IPv6 address parser of the Zyxel VMG8825-T50K firmware versions through 5.50(ABOM.8)C0 could allow an authenticated attacker with administrator privileges to cause potential memory corruptions, resulting in a thread crash on an affected device.
References
Impacted products
{ configurations: [ { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:wx5600-t0_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "43D29BE5-A0A9-4EA3-A0BB-AF3FCB83B9E5", versionEndExcluding: "5.70\\(aceb.3.2\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:wx5600-t0:-:*:*:*:*:*:*:*", matchCriteriaId: "303DB62A-2A7E-4CB7-ADA0-29C23BFD41BE", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:wx3401-b0_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "FEEFBA62-FF41-47F3-81F5-61034302A0E9", versionEndExcluding: "5.17\\(abve.2.5\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:wx3401-b0:-:*:*:*:*:*:*:*", matchCriteriaId: "677C554B-F9C7-4780-97C0-6021146F8B3C", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:wx3100-t0_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "1C9392FD-1E26-4C72-94BA-7F71BCB7FD32", versionEndExcluding: "5.50\\(abvl.4.3\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:wx3100-t0:-:*:*:*:*:*:*:*", matchCriteriaId: "C2C56248-D12F-46DC-A52F-0607E4A5DCCC", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:scr50axe_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "093F98C0-F84F-408C-9835-D63F238E81E9", versionEndExcluding: "1.10\\(acgn.3\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:scr50axe:-:*:*:*:*:*:*:*", matchCriteriaId: "FDE16790-D3CB-48D2-9C4C-ACCED14035BD", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:px3321-t1_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "EC1054FD-2E83-457C-9B5C-936813454B0E", versionEndExcluding: "5.44\\(acjb.1\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:px3321-t1:-:*:*:*:*:*:*:*", matchCriteriaId: "3BB525DE-2E08-4848-976E-7DF6C7E19578", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:pm7300-t0_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "7BD127D7-3B27-4D3B-A82C-B08D8BCFACF0", versionEndExcluding: "5.42\\(abyy.2.2\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:pm7300-t0:-:*:*:*:*:*:*:*", matchCriteriaId: "8AD1E2E3-2BB8-4CB3-AF81-C916312FE361", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:pm5100-t0_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "8AD5D584-14FB-424D-9175-A8F122483748", versionEndExcluding: "5.42\\(acbf.2.1\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:pm5100-t0:-:*:*:*:*:*:*:*", matchCriteriaId: "249AF476-CAA4-4C87-8CC3-E0AF15E61F7E", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:pm3100-t0_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "EF26B807-83DE-4D66-AB11-C8FF20D579D8", versionEndExcluding: "5.42\\(acbf.2.1\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:pm3100-t0:-:*:*:*:*:*:*:*", matchCriteriaId: "F78F88D4-A782-4075-A3CB-A728CE4014DF", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:ax7501-b1_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "61AC6D95-80A9-447F-9CB4-6CCA3A86334B", versionEndExcluding: "5.17\\(abpc.5.2\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:ax7501-b1:-:*:*:*:*:*:*:*", matchCriteriaId: "780BBA7D-7E2C-4624-AA15-8A51F3DF428F", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:vmg8825-t50k_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "B2781DE8-ADD6-48EF-8FC5-D2DBAEC44E8D", versionEndExcluding: "5.50\\(abom.8.4\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:vmg8825-t50k:-:*:*:*:*:*:*:*", matchCriteriaId: "D4C2320B-52DF-4F86-86D2-42FB62337773", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:vmg8623-t50b_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "191B287A-F923-42EE-81F5-A8895F15ABF6", versionEndExcluding: "5.50\\(abpm.9.2\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:vmg8623-t50b:-:*:*:*:*:*:*:*", matchCriteriaId: "C3535B63-318C-4EB5-ADC8-0AF3FB443DFC", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:vmg4005-b60a_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "2C7BE424-6E8A-485E-9F20-CCE34EE6BD17", versionEndExcluding: "5.17\\(abqa.2.2\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:vmg4005-b60a:-:*:*:*:*:*:*:*", matchCriteriaId: "30C1B91D-3EA0-4A1D-833A-6767A6C84DA3", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:vmg4005-b50a_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "71020993-535B-420A-A158-1406C8A611A2", versionEndExcluding: "5.17\\(abqa.2.2\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:vmg4005-b50a:-:*:*:*:*:*:*:*", matchCriteriaId: "88F74228-AC0C-4150-974D-54D77BBF9A90", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:vmg3927-t50k_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "4555EDDD-B50A-41F1-B603-D384DE0CC42A", versionEndExcluding: "5.50\\(abom.8.4\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:vmg3927-t50k:-:*:*:*:*:*:*:*", matchCriteriaId: "1B33AE56-3948-494B-9E23-54D939DF0D3E", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:vmg3625-t50b_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "A5EB06CB-BCFB-4EBF-A1C6-0A72DD9C56D8", versionEndExcluding: "5.50\\(abpm.9.2\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:vmg3625-t50b:-:*:*:*:*:*:*:*", matchCriteriaId: "BB5E8468-D12F-4CBE-AC7E-27D5A928A85A", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:emg5723-t50k_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "3530C6BA-5001-4BE2-B5EF-1A2638B234FF", versionEndExcluding: "5.50\\(abom.8.4\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:emg5723-t50k:-:*:*:*:*:*:*:*", matchCriteriaId: "B18982B2-E575-478E-A2B4-0932DE329056", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:emg5523-t50b_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "357C7DEF-891E-4D2D-9975-785E190B0E28", versionEndExcluding: "5.50\\(abpm.9.2\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:emg5523-t50b:-:*:*:*:*:*:*:*", matchCriteriaId: "F3ECE0EB-C429-4716-ABFB-73540847EB9E", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:emg3525-t50b_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "8657DD28-3CBB-4828-927A-07DFF03E07DC", versionEndExcluding: "5.50\\(abpm.9.2\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:emg3525-t50b:-:*:*:*:*:*:*:*", matchCriteriaId: "9259E2F6-885D-4B44-8D40-20758DA599D2", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:ex7710-b0_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "50F8A5D1-04C5-4187-AD53-A7BAEBB2D5F3", versionEndExcluding: "5.18\\(acak.1\\)c1", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:ex7710-b0:-:*:*:*:*:*:*:*", matchCriteriaId: "07727D9C-723B-4761-B6B6-07FE1784D3C1", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:ex7501-b0_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "CE07CE74-7E9A-4319-A04B-FAB27DF20A5E", versionEndExcluding: "5.18\\(achn.1.2\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:ex7501-b0:-:*:*:*:*:*:*:*", matchCriteriaId: "1CE049DE-A5DA-4A4F-BA30-BBD09FF34DE0", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:ex5601-t1_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "8BBBF350-66DE-4337-8E95-F1C5D75D5151", versionEndExcluding: "5.70\\(acdz.3.2\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:ex5601-t1:-:*:*:*:*:*:*:*", matchCriteriaId: "D629D4B6-B2F2-45F1-9295-71751570C231", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:ex5601-t0_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "5222AE4A-192D-4B52-B12A-7DC04047CDD4", versionEndExcluding: "5.70\\(acdz.3.2\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:ex5601-t0:-:*:*:*:*:*:*:*", matchCriteriaId: "ABFF2039-5DCC-4850-8BDA-3D418629C226", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:ex5512-t0_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "E4CB5021-3A4C-4D2E-BC78-4E027DB217E9", versionEndExcluding: "5.70\\(aceg.3\\)c2", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:ex5512-t0:-:*:*:*:*:*:*:*", matchCriteriaId: "F32FA3FB-CE89-4CC1-9D8D-765B90A122DF", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:ex5510-b0_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "37FB6CD6-AA0F-4A4A-9A10-0C0558FFC4FC", versionEndExcluding: "5.17\\(abqx.10\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:ex5510-b0:-:*:*:*:*:*:*:*", matchCriteriaId: "E82D41CC-2EB3-4892-8383-FB2C9EC64D9E", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:ex5401-b1_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "A8CA39B3-1819-4EAF-86AD-AFBA7C22C9AE", versionEndExcluding: "5.17\\(abyo.6.2\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:ex5401-b1:-:*:*:*:*:*:*:*", matchCriteriaId: "7213FA12-5CD6-4E9B-8387-A52AEF17EA10", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:ex5401-b0_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "6938EC2C-CAC9-4A43-8B30-96BD92279087", versionEndExcluding: "5.17\\(abyo.6.2\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:ex5401-b0:-:*:*:*:*:*:*:*", matchCriteriaId: "6B1B9D0C-AB6C-43E1-BFCA-50EF231510FC", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:ex3600-t0_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "0976A6EB-9A37-4316-B204-0E62E8CE832B", versionEndExcluding: "5.70\\(acif.0.3\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:ex3600-t0:-:*:*:*:*:*:*:*", matchCriteriaId: "D3BCC6A9-1CAE-459D-BE7D-AAB956BD1B92", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:ex3510-b1_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "DF914A6C-2C47-4869-9368-6ACC97876D5C", versionEndExcluding: "5.17\\(abup.12\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:ex3510-b1:-:*:*:*:*:*:*:*", matchCriteriaId: "3F955BD9-4D44-46BE-8605-51C6250A74D9", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:ex3510-b0_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "FC4B955B-CDA5-4BBB-8FFD-71394399A6C6", versionEndExcluding: "5.17\\(abup.12\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:ex3510-b0:-:*:*:*:*:*:*:*", matchCriteriaId: "E0455EC5-B783-4CDB-9DC0-D8EF377A5F2C", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:ex3501-t0_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "D72F97BC-0C04-436E-82EC-956164D97608", versionEndExcluding: "5.44\\(achr.2\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:ex3501-t0:-:*:*:*:*:*:*:*", matchCriteriaId: "A98F76BD-0404-46DD-AE6A-EB630FEC8904", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:ex3500-t0_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "BD151CF9-DC45-475A-9128-91102B7CDF34", versionEndExcluding: "5.44\\(achr.2\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:ex3500-t0:-:*:*:*:*:*:*:*", matchCriteriaId: "8714EB1B-38E5-4295-AD26-EE13E2161DEA", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:ex3301-t0_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "6CC5D271-3679-4962-8096-58BC125E553A", versionEndExcluding: "5.50\\(abvy.5.3\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:ex3301-t0:-:*:*:*:*:*:*:*", matchCriteriaId: "B37B17D8-76CF-4A26-B2DB-41B1BC9FD0A2", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:ex3300-t1_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "09AF8A00-ECF7-43EA-98FB-6BDA7C5CAD60", versionEndExcluding: "5.50\\(abvy.5.3\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:ex3300-t1:-:*:*:*:*:*:*:*", matchCriteriaId: "F766221F-7478-4E39-B4CD-A2498ACEE754", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:ex3300-t0_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "E60A1553-6685-4C75-91D0-199AC09558C6", versionEndExcluding: "5.50\\(abvy.5.3\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:ex3300-t0:-:*:*:*:*:*:*:*", matchCriteriaId: "137F8B94-4176-4D9B-8704-28525E7352D1", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:dx5401-b1_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "96DF49B6-9BF6-45FC-BCA5-B612F01AC2E1", versionEndExcluding: "5.17\\(abyo.6.2\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:dx5401-b1:-:*:*:*:*:*:*:*", matchCriteriaId: "AFE5C53C-4255-4AEE-A49E-36C1A2CF10F5", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:dx5401-b0_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "B8AF84D6-113E-49F3-9F3C-7EFE5DFEA8BF", versionEndExcluding: "5.17\\(abyo.6.2\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:dx5401-b0:-:*:*:*:*:*:*:*", matchCriteriaId: "B293E564-2C48-442A-A415-34383DF3ADBA", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:dx4510-b1_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "46E29474-6891-480C-AC09-A3FB21C0D5DB", versionEndExcluding: "5.17\\(abyl.7\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:dx4510-b1:-:*:*:*:*:*:*:*", matchCriteriaId: "C8668990-045A-4DDD-9089-DE0025B69765", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:dx4510-b0_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "344761C5-3143-4B42-869D-B35DEE2C51FE", versionEndExcluding: "5.17\\(abyl.7\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:dx4510-b0:-:*:*:*:*:*:*:*", matchCriteriaId: "A0338E1C-2509-4510-8C8D-4BD5AEA47D81", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:dx3301-t0_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "582711B2-B998-4FF8-8237-99B3B62EDC87", versionEndExcluding: "5.50\\(abvy.5.3\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:dx3301-t0:-:*:*:*:*:*:*:*", matchCriteriaId: "3BBDC072-5D40-4130-9B5F-22FDA9BF909A", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:dx3300-t1_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "F811CD1C-E4D8-43A0-8E95-07CE2566FC72", versionEndExcluding: "5.50\\(abvy.5.3\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:dx3300-t1:-:*:*:*:*:*:*:*", matchCriteriaId: "2456F691-C182-4BE6-A08F-5E1717366DCA", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:dx3300-t0_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "6B3EF633-501B-43DB-8297-D9AF9335B6C1", versionEndExcluding: "5.50\\(abvy.5.3\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:dx3300-t0:-:*:*:*:*:*:*:*", matchCriteriaId: "6D3E176E-F728-4385-8533-4C694D43898A", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, ], cveTags: [], descriptions: [ { lang: "en", value: "An improper restriction of operations within the bounds of a memory buffer in the IPv6 address parser of the Zyxel VMG8825-T50K firmware versions through 5.50(ABOM.8)C0 could allow an authenticated attacker with administrator privileges to cause potential memory corruptions, resulting in a thread crash on an affected device.", }, { lang: "es", value: "Una restricción incorrecta de las operaciones dentro de los límites de un búfer de memoria en el analizador de direcciones IPv6 de las versiones de firmware Zyxel VMG8825-T50K hasta la 5.50(ABOM.8)C0 podría permitir que un atacante autenticado con privilegios de administrador provoque posibles corrupciones de memoria, lo que resultaría en un bloqueo del hilo en un dispositivo afectado.", }, ], id: "CVE-2024-38267", lastModified: "2024-09-30T15:52:52.787", metrics: { cvssMetricV31: [ { cvssData: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 4.9, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "HIGH", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", version: "3.1", }, exploitabilityScore: 1.2, impactScore: 3.6, source: "security@zyxel.com.tw", type: "Primary", }, ], }, published: "2024-09-24T02:15:02.750", references: [ { source: "security@zyxel.com.tw", tags: [ "Vendor Advisory", ], url: "https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-post-authentication-memory-corruption-vulnerabilities-in-some-dsl-ethernet-cpe-fiber-ont-wifi-extender-and-security-router-versions-09-24-2024", }, ], sourceIdentifier: "security@zyxel.com.tw", vulnStatus: "Analyzed", weaknesses: [ { description: [ { lang: "en", value: "CWE-119", }, ], source: "security@zyxel.com.tw", type: "Secondary", }, { description: [ { lang: "en", value: "NVD-CWE-noinfo", }, ], source: "nvd@nist.gov", type: "Primary", }, ], }
Vulnerability from fkie_nvd
Published
2024-12-03 02:15
Modified
2025-01-21 21:20
Severity ?
Summary
A buffer overflow vulnerability in the packet parser of the third-party library "libclinkc" in Zyxel VMG8825-T50K firmware versions through V5.50(ABOM.8.4)C0 could allow an attacker to cause a temporary denial of service (DoS) condition against the web management interface by sending a crafted HTTP POST request to a vulnerable device.
References
Impacted products
{ configurations: [ { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:lte3301-plus_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "6716746F-4642-4BA8-B1FB-38CBE0FEFE65", versionEndExcluding: "1.00\\(abqu.6\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:lte3301-plus:-:*:*:*:*:*:*:*", matchCriteriaId: "4814D3A1-C0D4-4573-AD77-C2EE7AC11CB4", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:lte5388-m804_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "F8A2E6EF-6C66-4D10-8F13-207C102BB403", versionEndExcluding: "1.00\\(absq.5\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:lte5388-m804:-:*:*:*:*:*:*:*", matchCriteriaId: "E67FFCF7-ECE9-4644-B248-1B6E10AD9398", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:lte5398-m904_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "C439774C-3B11-4738-8F57-24AE9190E437", versionEndExcluding: "1.00\\(abq.5\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:lte5398-m904:-:*:*:*:*:*:*:*", matchCriteriaId: "F90453B8-19FF-4FF3-A167-E1A70E022201", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:lte7480-m804_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "441D0E0B-3740-41A5-B227-F737C011B935", versionEndExcluding: "1.00\\(abra.10\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:lte7480-m804:-:*:*:*:*:*:*:*", matchCriteriaId: "E3480021-1538-48ED-BE89-BB0DF562C7DE", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:lte7490-m904_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "F271F483-5F07-4305-B674-87C29D59DCBF", versionEndExcluding: "1.00\\(abqy.9\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:lte7490-m904:-:*:*:*:*:*:*:*", matchCriteriaId: "DC75F6DE-DCAF-47A0-B6BB-0E050C68AF25", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:nr7101_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "A73FA031-D008-4AFA-AAEB-8DCDAD995B46", versionEndExcluding: "1.00\\(abu.11\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:nr7101:-:*:*:*:*:*:*:*", matchCriteriaId: "E4D27B24-9822-432C-8B8B-9546EE32DEC6", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:nr7102_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "90099DBC-0E96-4F19-BEDF-1220A2E054DC", versionEndExcluding: "1.00\\(abyd.4\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:nr7102:-:*:*:*:*:*:*:*", matchCriteriaId: "F1A15757-DE6F-4A72-9CAD-BAC04BD340A0", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:nebula_nr5101_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "D8EECE4B-3C71-4738-8A95-FDD453D5F077", versionEndExcluding: "1.16\\(accg.1\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:nebula_nr5101:-:*:*:*:*:*:*:*", matchCriteriaId: "F9F605B8-A892-4119-AB7A-D14CDC5DFC88", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:nebula_nr7101_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "16CC26F4-CE74-470D-98B0-CDD57B19DE7E", versionEndExcluding: "1.16\\(accc.1\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:nebula_nr7101:-:*:*:*:*:*:*:*", matchCriteriaId: "52096C1F-F73C-413E-9D37-82EFA4703AEC", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:nebula_lte3301-plus_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "2E09E83F-148C-4598-91A4-9712C198A0D6", versionEndExcluding: "1.18\\(acca.5\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:nebula_lte3301-plus:-:*:*:*:*:*:*:*", matchCriteriaId: "42297A6A-3E50-4E9E-ABF6-58C77F222DC1", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:dx3300-t0_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "68D2EEEC-58EA-4444-AFBD-8CDA76DE7C30", versionEndExcluding: "5.50\\(aby.5.4\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:dx3300-t0:-:*:*:*:*:*:*:*", matchCriteriaId: "6D3E176E-F728-4385-8533-4C694D43898A", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:dx3300-t1_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "72C17621-DFBD-43E0-ABCE-31EA1424A95D", versionEndExcluding: "5.50\\(aby.5.4\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:dx3300-t1:-:*:*:*:*:*:*:*", matchCriteriaId: "2456F691-C182-4BE6-A08F-5E1717366DCA", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:dx3301-t0_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "F03882BE-6854-4DA0-AE71-E1DF1D9942F0", versionEndExcluding: "5.50\\(aby.5.4\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:dx3301-t0:-:*:*:*:*:*:*:*", matchCriteriaId: "3BBDC072-5D40-4130-9B5F-22FDA9BF909A", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:dx4510-b0_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "E69CBC66-C2FA-441A-A8DE-DE5ABA996503", versionEndExcluding: "5.17\\(abyl.8\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:dx4510-b0:-:*:*:*:*:*:*:*", matchCriteriaId: "A0338E1C-2509-4510-8C8D-4BD5AEA47D81", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:dx4510-b1_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "99BD602C-4DB1-4C4C-BC2A-EBD52E4C962C", versionEndExcluding: "5.17\\(abyl.8\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:dx4510-b1:-:*:*:*:*:*:*:*", matchCriteriaId: "C8668990-045A-4DDD-9089-DE0025B69765", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:dx5401-b0_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "14B8FE6B-542A-4EE7-8BD3-7E5547E0BB08", versionEndExcluding: "5.17\\(abyo.6.4\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:dx5401-b0:-:*:*:*:*:*:*:*", matchCriteriaId: "B293E564-2C48-442A-A415-34383DF3ADBA", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:dx5401-b1_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "5B632720-75B8-47A7-8694-C27C2CA26D4E", versionEndExcluding: "5.17\\(abyo.6.4\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:dx5401-b1:-:*:*:*:*:*:*:*", matchCriteriaId: "AFE5C53C-4255-4AEE-A49E-36C1A2CF10F5", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:ee6510-10_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "CEC2224E-9481-447A-8E1F-0F6BE170323E", versionEndExcluding: "5.19\\(acjq.1\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:ee6510-10:-:*:*:*:*:*:*:*", matchCriteriaId: "CD4AE46D-E374-4224-9A66-4291B6A10C00", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:ex2210-t0_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "1F2AE02D-5388-434C-956E-D7B326ABF44F", versionEndExcluding: "5.50\\(acdi.2\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:ex2210-t0:-:*:*:*:*:*:*:*", matchCriteriaId: "A71E4E6F-357E-4DAA-B7D7-7CF44000F0CF", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:ex3300-t0_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "FCAF5BD1-FA85-47D8-AC74-B89C37673872", versionEndExcluding: "5.50\\(aby.5.4\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:ex3300-t0:-:*:*:*:*:*:*:*", matchCriteriaId: "137F8B94-4176-4D9B-8704-28525E7352D1", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:ex3300-t1_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "DED77538-32BD-41D0-AFB0-B523B1B0D626", versionEndExcluding: "5.50\\(aby.5.4\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:ex3300-t1:-:*:*:*:*:*:*:*", matchCriteriaId: "F766221F-7478-4E39-B4CD-A2498ACEE754", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:ex3301-t0_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "15FA1F1B-3DAB-4C9A-9EAC-6F73C91C6000", versionEndExcluding: "5.50\\(aby.5.4\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:ex3301-t0:-:*:*:*:*:*:*:*", matchCriteriaId: "B37B17D8-76CF-4A26-B2DB-41B1BC9FD0A2", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:ex3500-t0_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "31134E19-A43A-4414-AC4A-A4D3D6D89C3F", versionEndExcluding: "5.44\\(achr.3\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:ex3500-t0:-:*:*:*:*:*:*:*", matchCriteriaId: "8714EB1B-38E5-4295-AD26-EE13E2161DEA", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:ex3501-t0_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "7B24B63E-44D9-4967-9A25-0845F07466DE", versionEndExcluding: "5.44\\(achr.3\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:ex3501-t0:-:*:*:*:*:*:*:*", matchCriteriaId: "A98F76BD-0404-46DD-AE6A-EB630FEC8904", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:ex3510-b0_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "7A631CCE-1DBA-45EA-BCAE-35976C74CFB6", versionEndExcluding: "5.17\\(abup.13\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:ex3510-b0:-:*:*:*:*:*:*:*", matchCriteriaId: "E0455EC5-B783-4CDB-9DC0-D8EF377A5F2C", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:ex3510-b1_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "D5F451D2-9058-439C-B065-C635E1833B28", versionEndExcluding: "5.17\\(abup.13\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:ex3510-b1:-:*:*:*:*:*:*:*", matchCriteriaId: "3F955BD9-4D44-46BE-8605-51C6250A74D9", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:ex3600-t0_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "F55E0C82-22FD-4345-BA36-3A2F29216AD3", versionEndExcluding: "5.70\\(acif.0.4\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:ex3600-t0:-:*:*:*:*:*:*:*", matchCriteriaId: "D3BCC6A9-1CAE-459D-BE7D-AAB956BD1B92", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:ex5401-b0_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "08F959D0-DAF0-4D07-811C-54E780ABB35E", versionEndExcluding: "5.17\\(abyo.6.4\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:ex5401-b0:-:*:*:*:*:*:*:*", matchCriteriaId: "6B1B9D0C-AB6C-43E1-BFCA-50EF231510FC", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:ex5401-b1_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "4CE7E255-C846-4509-A6CE-CBC50C0E5EE5", versionEndExcluding: "5.17\\(abyo.6.4\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:ex5401-b1:-:*:*:*:*:*:*:*", matchCriteriaId: "7213FA12-5CD6-4E9B-8387-A52AEF17EA10", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:ex5501-b0_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "F887CE60-20C2-4301-B515-5C14C9C8D805", versionEndExcluding: "5.17\\(abry.5.3\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:ex5501-b0:-:*:*:*:*:*:*:*", matchCriteriaId: "88B8CDD0-E73A-4FAA-9964-D8C09949CB32", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:ex5510-b0_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "568E5F9E-EFFE-4D1B-B06B-EED70C27985B", versionEndExcluding: "5.17\\(abqx.11\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:ex5510-b0:-:*:*:*:*:*:*:*", matchCriteriaId: "E82D41CC-2EB3-4892-8383-FB2C9EC64D9E", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:ex5512-t0_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "2177DB8F-097F-438C-9B0F-E4A14540A89D", versionEndExcluding: "5.70\\(aceg4.2\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:ex5512-t0:-:*:*:*:*:*:*:*", matchCriteriaId: "F32FA3FB-CE89-4CC1-9D8D-765B90A122DF", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:ex5600-t1_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "CAF44159-2967-4DDD-8AD8-DE16871899D7", versionEndExcluding: "5.70\\(acdz.3.4\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:ex5600-t1:-:*:*:*:*:*:*:*", matchCriteriaId: "021CFB91-4627-4080-BF09-0BB5EFA708DD", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:ex5601-t0_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "43F04ACC-EED8-4800-BA30-3FC704AF5D6C", versionEndExcluding: "5.70\\(acdz.3.4\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:ex5601-t0:-:*:*:*:*:*:*:*", matchCriteriaId: "ABFF2039-5DCC-4850-8BDA-3D418629C226", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:ex5601-t1_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "435327F5-1A4D-46BA-B572-0771BAD3215F", versionEndExcluding: "5.70\\(acdz.3.4\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:ex5601-t1:-:*:*:*:*:*:*:*", matchCriteriaId: "D629D4B6-B2F2-45F1-9295-71751570C231", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:ex7501-b0_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "116A0A50-6379-4D72-8059-4D74FA208140", versionEndExcluding: "5.18\\(achn.1.3\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:ex7501-b0:-:*:*:*:*:*:*:*", matchCriteriaId: "1CE049DE-A5DA-4A4F-BA30-BBD09FF34DE0", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:ex7710-b0_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "19EE58DA-A323-4BE1-A761-5E2C94F8A2A6", versionEndExcluding: "5.18\\(acak.1.1\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:ex7710-b0:-:*:*:*:*:*:*:*", matchCriteriaId: "07727D9C-723B-4761-B6B6-07FE1784D3C1", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:emg3525-t50b_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "B992C7F8-F4DF-4426-ACFE-B1EF7DB26E53", versionEndExcluding: "5.50\\(abpm.9.3\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:emg3525-t50b:-:*:*:*:*:*:*:*", matchCriteriaId: "9259E2F6-885D-4B44-8D40-20758DA599D2", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:emg5523-t50b_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "93D83C92-EE57-48F4-B532-FC13657D0F37", versionEndExcluding: "5.50\\(abpm.9.3\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:emg5523-t50b:-:*:*:*:*:*:*:*", matchCriteriaId: "F3ECE0EB-C429-4716-ABFB-73540847EB9E", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:emg5723-t50k_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "131D1D3D-382A-4563-B608-3848AACDF8A0", versionEndExcluding: "5.50\\(abom.8.5\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:emg5723-t50k:-:*:*:*:*:*:*:*", matchCriteriaId: "B18982B2-E575-478E-A2B4-0932DE329056", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:emg6726-b10a_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "593C78E3-E459-4519-9313-FAA93315A6C8", versionEndExcluding: "5.13\\(abnp.8\\)c1", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:emg6726-b10a:-:*:*:*:*:*:*:*", matchCriteriaId: "304D3B33-F7EC-4EB3-B6EF-6BEB2112F9C0", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:vmg3625-t50b_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "DC43957D-D4F5-4D72-9876-C2796F9714CD", versionEndExcluding: "5.50\\(abpm.9.3\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:vmg3625-t50b:-:*:*:*:*:*:*:*", matchCriteriaId: "BB5E8468-D12F-4CBE-AC7E-27D5A928A85A", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:vmg3927-b50b_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "1009022D-5033-47D2-B310-5B0C42CA3F69", versionEndExcluding: "5.13\\(ably.9\\)c1", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:vmg3927-b50b:-:*:*:*:*:*:*:*", matchCriteriaId: "94BE349D-EC30-4EB7-8B68-EA7223364A4B", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:vmg3927-t50k_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "F5030BD1-0653-4431-87B9-07CA0C1FDE33", versionEndExcluding: "5.50\\(abom.8.5\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:vmg3927-t50k:-:*:*:*:*:*:*:*", matchCriteriaId: "1B33AE56-3948-494B-9E23-54D939DF0D3E", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:vmg4005-b50a_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "BFEB980C-00C4-45DB-A2C1-64F3BB69DF54", versionEndExcluding: "5.15\\(abqa.2.3\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:vmg4005-b50a:-:*:*:*:*:*:*:*", matchCriteriaId: "88F74228-AC0C-4150-974D-54D77BBF9A90", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:vmg4005-b60a_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "FD035A19-15E2-4740-A264-11D0E30777A2", versionEndExcluding: "5.15\\(abqa.2.3\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:vmg4005-b60a:-:*:*:*:*:*:*:*", matchCriteriaId: "30C1B91D-3EA0-4A1D-833A-6767A6C84DA3", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:vmg4005-b50b_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "8696573D-D3FF-4CAB-B6C0-743B8AAA20AE", versionEndExcluding: "5.13\\(abrl.5.2\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:vmg4005-b50b:-:*:*:*:*:*:*:*", matchCriteriaId: "36B2A37B-0662-43E7-AEB4-DF0C5A30A95F", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:vmg4927-b50a_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "8D62F49F-1E1B-4E6E-A72A-1DEC917E21DC", versionEndExcluding: "5.13\\(ably.9\\)c1", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:vmg4927-b50a:-:*:*:*:*:*:*:*", matchCriteriaId: "C0EE70D2-51BB-4E45-8995-655C1394C440", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:vmg8623-t50b_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "916BC802-CBB6-43FE-91D2-76EFA752481C", versionEndExcluding: "5.50\\(abpm.9.3\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:vmg8623-t50b:-:*:*:*:*:*:*:*", matchCriteriaId: "C3535B63-318C-4EB5-ADC8-0AF3FB443DFC", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:vmg8825-t50k_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "FA0D8789-938A-475D-B105-64B225BABD97", versionEndExcluding: "5.50\\(abom.8.5\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:vmg8825-t50k:-:*:*:*:*:*:*:*", matchCriteriaId: "D4C2320B-52DF-4F86-86D2-42FB62337773", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:vmg8825-t50k_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "2EEC4924-34DB-4AFB-8CEF-0ABBAFFD0E0B", versionEndExcluding: "5.50\\(abpy.1\\)b26", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:vmg8825-t50k:-:*:*:*:*:*:*:*", matchCriteriaId: "D4C2320B-52DF-4F86-86D2-42FB62337773", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:ax7501-b0_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "F525A6F3-7510-47EF-AD60-A05214BEAFF8", versionEndExcluding: "5.17\\(abpc.5.3\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:ax7501-b0:-:*:*:*:*:*:*:*", matchCriteriaId: "78473083-F702-4B81-AAA0-B66A0984FF6B", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:ax7501-b1_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "77887B8D-E582-41FC-8ED5-11D631C5A062", versionEndExcluding: "5.17\\(abpc.5.3\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:ax7501-b1:-:*:*:*:*:*:*:*", matchCriteriaId: "780BBA7D-7E2C-4624-AA15-8A51F3DF428F", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:pm3100-t0_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "804D1F95-0D82-4052-98C6-996DBB94BB48", versionEndExcluding: "5.42\\(acbf.3\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:pm3100-t0:-:*:*:*:*:*:*:*", matchCriteriaId: "F78F88D4-A782-4075-A3CB-A728CE4014DF", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:pm5100-t0_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "85D7006F-2710-4A4E-958B-F707865D942A", versionEndExcluding: "5.42\\(acbf.3\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:pm5100-t0:-:*:*:*:*:*:*:*", matchCriteriaId: "249AF476-CAA4-4C87-8CC3-E0AF15E61F7E", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:pm7300-t0_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "D0E85316-F791-4789-AA88-DE1D5E9E62A0", versionEndExcluding: "5.42\\(abyy.2.3\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:pm7300-t0:-:*:*:*:*:*:*:*", matchCriteriaId: "8AD1E2E3-2BB8-4CB3-AF81-C916312FE361", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:pm7500-t0_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "95E49610-E756-42B8-8C0C-438A587EB8DB", versionEndExcluding: "5.61\\(ackk.0.1\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:pm7500-t0:-:*:*:*:*:*:*:*", matchCriteriaId: "09F7FD2C-ED57-4EB4-9EB7-DE2F376FD858", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:px3321-t1_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "A23D6389-D322-4EC0-847A-488B735CE373", versionEndExcluding: "5.44\\(acjb.1.1\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:px3321-t1:-:*:*:*:*:*:*:*", matchCriteriaId: "3BB525DE-2E08-4848-976E-7DF6C7E19578", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:px3321-t1_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "A6DBE5D0-F363-4EDA-8CE9-14F2B2B0C19D", versionEndExcluding: "5.44\\(achk.0.3\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:px3321-t1:-:*:*:*:*:*:*:*", matchCriteriaId: "3BB525DE-2E08-4848-976E-7DF6C7E19578", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:px5301-t0_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "2213D90C-25CE-4A61-8479-1BC87DF35A80", versionEndExcluding: "5.44\\(ackb.0.1\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:px5301-t0:-:*:*:*:*:*:*:*", matchCriteriaId: "7EBB4C27-DAEB-4297-98DC-3B22353B5184", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:wx3100-t0_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "D7D3A977-B98F-4626-8C3A-D830F5355D85", versionEndExcluding: "5.50\\(abl.4.4\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:wx3100-t0:-:*:*:*:*:*:*:*", matchCriteriaId: "C2C56248-D12F-46DC-A52F-0607E4A5DCCC", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:wx3401-b0_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "801684BD-8E4B-4881-9052-0116734FFB66", versionEndExcluding: "5.17\\(abe.2.6\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:wx3401-b0:-:*:*:*:*:*:*:*", matchCriteriaId: "677C554B-F9C7-4780-97C0-6021146F8B3C", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:wx3401-b1_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "23166E44-D53C-4410-B50D-9C7C10B1D7E8", versionEndExcluding: "5.17\\(abe.2.6\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:wx3401-b1:-:*:*:*:*:*:*:*", matchCriteriaId: "E7C8FB13-CBCF-4A74-8DFD-874B9A990577", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:wx5600-t0_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "5F48FFD6-108C-459D-96D8-5ABE4F10681A", versionEndExcluding: "5.70\\(aceb.3.3\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:wx5600-t0:-:*:*:*:*:*:*:*", matchCriteriaId: "303DB62A-2A7E-4CB7-ADA0-29C23BFD41BE", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:wx5610-b0_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "3280237A-C025-4324-8747-39EE5D697327", versionEndExcluding: "5.18\\(acgj0.1\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:wx5610-b0:-:*:*:*:*:*:*:*", matchCriteriaId: "88909887-E078-4EC5-BA49-2EFCABF1EB1B", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, ], cveTags: [], descriptions: [ { lang: "en", value: "A buffer overflow vulnerability in the packet parser of the third-party library \"libclinkc\" in Zyxel VMG8825-T50K firmware versions through V5.50(ABOM.8.4)C0 could allow an attacker to cause a temporary denial of service (DoS) condition against the web management interface by sending a crafted HTTP POST request to a vulnerable device.", }, { lang: "es", value: "Una vulnerabilidad de desbordamiento de búfer en el analizador de paquetes de la librería de terceros \"libclinkc\" en las versiones de firmware Zyxel VMG8825-T50K hasta V5.50(ABOM.8.4)C0 podría permitir que un atacante provoque una condición de denegación de servicio (DoS) temporal contra la interfaz de administración web al enviar una solicitud HTTP POST manipulada a un dispositivo vulnerable.", }, ], id: "CVE-2024-8748", lastModified: "2025-01-21T21:20:19.757", metrics: { cvssMetricV31: [ { cvssData: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", version: "3.1", }, exploitabilityScore: 3.9, impactScore: 3.6, source: "security@zyxel.com.tw", type: "Primary", }, ], }, published: "2024-12-03T02:15:17.620", references: [ { source: "security@zyxel.com.tw", tags: [ "Vendor Advisory", ], url: "https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-buffer-overflow-and-post-authentication-command-injection-vulnerabilities-in-some-4g-lte-5g-nr-cpe-dsl-ethernet-cpe-fiber-onts-and-wifi-extenders-12-03-2024", }, ], sourceIdentifier: "security@zyxel.com.tw", vulnStatus: "Analyzed", weaknesses: [ { description: [ { lang: "en", value: "CWE-120", }, ], source: "security@zyxel.com.tw", type: "Primary", }, ], }
Vulnerability from fkie_nvd
Published
2024-09-24 02:15
Modified
2025-01-22 22:27
Severity ?
Summary
An improper restriction of operations within the bounds of a memory buffer in the parameter type parser of the Zyxel VMG8825-T50K firmware versions through 5.50(ABOM.8)C0 could allow an authenticated attacker with administrator privileges to cause potential memory corruptions, resulting in a thread crash on an affected device.
References
Impacted products
{ configurations: [ { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:dx3300-t0_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "431FB9C8-18A7-47DB-BEB9-B951BF5B3C5D", versionEndExcluding: "5.50\\(abvy.5\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:dx3300-t0:-:*:*:*:*:*:*:*", matchCriteriaId: "6D3E176E-F728-4385-8533-4C694D43898A", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:dx3300-t1_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "DD82977B-FFB9-4DFB-A1A1-3DFD1AED5D59", versionEndExcluding: "5.50\\(abvy.5\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:dx3300-t1:-:*:*:*:*:*:*:*", matchCriteriaId: "2456F691-C182-4BE6-A08F-5E1717366DCA", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:dx3301-t0_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "721831F3-731A-4650-8DCB-B2F73D38F601", versionEndExcluding: "5.50\\(abvy.5\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:dx3301-t0:-:*:*:*:*:*:*:*", matchCriteriaId: "3BBDC072-5D40-4130-9B5F-22FDA9BF909A", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:dx4510-b0_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "B391DACC-3AA9-450B-A645-2DF887724FC5", versionEndExcluding: "5.17\\(abyl.6\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:dx4510-b0:-:*:*:*:*:*:*:*", matchCriteriaId: "A0338E1C-2509-4510-8C8D-4BD5AEA47D81", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:dx4510-b1_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "59150616-DFB9-4D3C-90EB-1816C6CA99FF", versionEndExcluding: "5.17\\(abyl.6\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:dx4510-b1:-:*:*:*:*:*:*:*", matchCriteriaId: "C8668990-045A-4DDD-9089-DE0025B69765", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:dx5401-b0_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "A23D605A-8FC8-4E56-9307-99C3322FB2AE", versionEndExcluding: "5.17\\(abyo.6\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:dx5401-b0:-:*:*:*:*:*:*:*", matchCriteriaId: "B293E564-2C48-442A-A415-34383DF3ADBA", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:dx5401-b1_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "BEAFF300-DEFA-4FA0-9A8B-5EF3B3BA631C", versionEndExcluding: "5.17\\(abyo.6\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:dx5401-b1:-:*:*:*:*:*:*:*", matchCriteriaId: "AFE5C53C-4255-4AEE-A49E-36C1A2CF10F5", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:ex3300-t0_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "631CD12F-B60B-4499-8EC1-C23C5815D409", versionEndExcluding: "5.50\\(abvy.5\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:ex3300-t0:-:*:*:*:*:*:*:*", matchCriteriaId: "137F8B94-4176-4D9B-8704-28525E7352D1", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:ex3300-t1_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "4F93EC53-2922-4E2E-83C6-A16869C4D454", versionEndExcluding: "5.50\\(abvy.5\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:ex3300-t1:-:*:*:*:*:*:*:*", matchCriteriaId: "F766221F-7478-4E39-B4CD-A2498ACEE754", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:ex3301-t0_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "08264249-0B2C-4484-803D-4E362708B994", versionEndExcluding: "5.50\\(abvy.5\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:ex3301-t0:-:*:*:*:*:*:*:*", matchCriteriaId: "B37B17D8-76CF-4A26-B2DB-41B1BC9FD0A2", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:ex3500-t0_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "23B1F148-F91B-457C-B4AC-98FA94888D95", versionEndExcluding: "5.44\\(achr.1\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:ex3500-t0:-:*:*:*:*:*:*:*", matchCriteriaId: "8714EB1B-38E5-4295-AD26-EE13E2161DEA", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:ex3501-t0_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "0DA631B1-EEF6-4874-AD0C-9DE339BDD050", versionEndExcluding: "5.44\\(achr.1\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:ex3501-t0:-:*:*:*:*:*:*:*", matchCriteriaId: "A98F76BD-0404-46DD-AE6A-EB630FEC8904", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:ex3510-b0_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "0BA471AB-D9DE-4065-B225-8090CAA6BB95", versionEndExcluding: "5.17\\(abup.11\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:ex3510-b0:-:*:*:*:*:*:*:*", matchCriteriaId: "E0455EC5-B783-4CDB-9DC0-D8EF377A5F2C", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:ex3510-b1_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "370BC729-109E-4F2B-8A2D-20F3D29DB1A8", versionEndExcluding: "5.17\\(abup.11\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:ex3510-b1:-:*:*:*:*:*:*:*", matchCriteriaId: "3F955BD9-4D44-46BE-8605-51C6250A74D9", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:ex3600-t0_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "1B4D9203-899C-4007-A697-92AC4DFDAE65", versionEndExcluding: "5.70\\(acif.0.2\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:ex3600-t0:-:*:*:*:*:*:*:*", matchCriteriaId: "D3BCC6A9-1CAE-459D-BE7D-AAB956BD1B92", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:ex5401-b0_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "25200340-B35C-49C9-9119-C2B5CC0F5920", versionEndExcluding: "5.17\\(abyo.6\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:ex5401-b0:-:*:*:*:*:*:*:*", matchCriteriaId: "6B1B9D0C-AB6C-43E1-BFCA-50EF231510FC", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:ex5401-b1_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "B133176C-F67A-442E-9034-B9D86F6B7B58", versionEndExcluding: "5.17\\(abyo.6\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:ex5401-b1:-:*:*:*:*:*:*:*", matchCriteriaId: "7213FA12-5CD6-4E9B-8387-A52AEF17EA10", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:ex5510-b0_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "5525243D-7CC3-4AE3-BC56-0EEFEB55A63B", versionEndExcluding: "5.17\\(abqx.9\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:ex5510-b0:-:*:*:*:*:*:*:*", matchCriteriaId: "E82D41CC-2EB3-4892-8383-FB2C9EC64D9E", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:ex5512-t0_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "FD948A47-CB7C-4589-9886-545BE104C70C", versionEndExcluding: "5.70\\(aceg.3\\)c1", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:ex5512-t0:-:*:*:*:*:*:*:*", matchCriteriaId: "F32FA3FB-CE89-4CC1-9D8D-765B90A122DF", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:ex5601-t0_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "718B9CCD-EE53-4716-918A-1C6D7C4967FB", versionEndExcluding: "5.70\\(acdz.3\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:ex5601-t0:-:*:*:*:*:*:*:*", matchCriteriaId: "ABFF2039-5DCC-4850-8BDA-3D418629C226", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:ex5601-t1_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "4CF46A0E-C1A9-47E0-A673-6E48F4097CE3", versionEndExcluding: "5.70\\(acdz.3\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:ex5601-t1:-:*:*:*:*:*:*:*", matchCriteriaId: "D629D4B6-B2F2-45F1-9295-71751570C231", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:ex7501-b0_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "86153210-F574-46EA-8041-06CB2D2118C4", versionEndExcluding: "5.18\\(achn.1\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:ex7501-b0:-:*:*:*:*:*:*:*", matchCriteriaId: "1CE049DE-A5DA-4A4F-BA30-BBD09FF34DE0", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:ex7710-b0_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "697EE8E6-C4DB-45FC-A114-DFDF778D4C0B", versionEndExcluding: "5.18\\(acak.1\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:ex7710-b0:-:*:*:*:*:*:*:*", matchCriteriaId: "07727D9C-723B-4761-B6B6-07FE1784D3C1", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:emg3525-t50b_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "2E2FAE22-68C4-417C-8D1E-977D2D996212", versionEndExcluding: "5.50\\(abpm.9\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:emg3525-t50b:-:*:*:*:*:*:*:*", matchCriteriaId: "9259E2F6-885D-4B44-8D40-20758DA599D2", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:emg5523-t50b_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "1B69BAD2-E085-4A01-9B9B-A6E464A33465", versionEndExcluding: "5.50\\(abpm.9\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:emg5523-t50b:-:*:*:*:*:*:*:*", matchCriteriaId: "F3ECE0EB-C429-4716-ABFB-73540847EB9E", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:emg5723-t50k_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "C08C685F-93D8-4C5D-AE9B-5A1E30985075", versionEndExcluding: "5.50\\(abom.8\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:emg5723-t50k:-:*:*:*:*:*:*:*", matchCriteriaId: "B18982B2-E575-478E-A2B4-0932DE329056", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:vmg3625-t50b_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "3F605497-6085-48E9-809D-5D1EFCD7022A", versionEndExcluding: "5.50\\(abpm.9\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:vmg3625-t50b:-:*:*:*:*:*:*:*", matchCriteriaId: "BB5E8468-D12F-4CBE-AC7E-27D5A928A85A", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:vmg3927-t50k_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "4A40BCD8-C6D5-4DD7-92A6-305886662570", versionEndExcluding: "5.50\\(abom.8\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:vmg3927-t50k:-:*:*:*:*:*:*:*", matchCriteriaId: "1B33AE56-3948-494B-9E23-54D939DF0D3E", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:vmg4005-b50a_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "6FCA4418-484B-4C5F-8DEA-339DE9F70A31", versionEndExcluding: "5.17\\(abqa.2\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:vmg4005-b50a:-:*:*:*:*:*:*:*", matchCriteriaId: "88F74228-AC0C-4150-974D-54D77BBF9A90", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:vmg4005-b60a_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "DE21BF5A-1D7D-4F80-BED4-15BFE043FF83", versionEndExcluding: "5.17\\(abqa.2\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:vmg4005-b60a:-:*:*:*:*:*:*:*", matchCriteriaId: "30C1B91D-3EA0-4A1D-833A-6767A6C84DA3", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:vmg8623-t50b_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "E1A1A61C-1C53-4D02-A23A-D259DAE2C17C", versionEndExcluding: "5.50\\(abpm.9\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:vmg8623-t50b:-:*:*:*:*:*:*:*", matchCriteriaId: "C3535B63-318C-4EB5-ADC8-0AF3FB443DFC", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:vmg8825-t50k_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "0F7F95B3-A92F-492F-AE07-ABC54A3158AB", versionEndExcluding: "5.50\\(abom.8\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:vmg8825-t50k:-:*:*:*:*:*:*:*", matchCriteriaId: "D4C2320B-52DF-4F86-86D2-42FB62337773", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:vmg8825-t50k_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "C14636B1-3639-4C61-B4D3-C7EE96D037A8", versionEndExcluding: "5.50\\(abpy.1\\)b24", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:vmg8825-t50k:-:*:*:*:*:*:*:*", matchCriteriaId: "D4C2320B-52DF-4F86-86D2-42FB62337773", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:ax7501-b0_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "25C537B8-C8C1-4F87-8170-D84106CD547F", versionEndExcluding: "5.17\\(abpc.5\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:ax7501-b0:-:*:*:*:*:*:*:*", matchCriteriaId: "78473083-F702-4B81-AAA0-B66A0984FF6B", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:ax7501-b1_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "4747B9E9-49BE-4204-B41F-A888E84ECB5E", versionEndExcluding: "5.17\\(abpc.5\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:ax7501-b1:-:*:*:*:*:*:*:*", matchCriteriaId: "780BBA7D-7E2C-4624-AA15-8A51F3DF428F", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:pm3100-t0_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "F9D1A52F-3F12-4A65-A89D-0C4B36AD75AF", versionEndExcluding: "5.42\\(acbf.2\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:pm3100-t0:-:*:*:*:*:*:*:*", matchCriteriaId: "F78F88D4-A782-4075-A3CB-A728CE4014DF", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:pm5100-t0_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "3173CEDB-9BBB-4634-A59D-A0A1005B19A1", versionEndExcluding: "5.42\\(acbf.2\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:pm5100-t0:-:*:*:*:*:*:*:*", matchCriteriaId: "249AF476-CAA4-4C87-8CC3-E0AF15E61F7E", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:pm7300-t0_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "AD1235B7-F446-4664-B46C-F5AE0C23AAC6", versionEndExcluding: "5.42\\(abyy.2.1\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:pm7300-t0:-:*:*:*:*:*:*:*", matchCriteriaId: "8AD1E2E3-2BB8-4CB3-AF81-C916312FE361", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:px3321-t1_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "E62AA1B8-C573-4A08-9A9B-C6536CC7874E", versionEndExcluding: "5.44\\(acjb.0\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:px3321-t1:-:*:*:*:*:*:*:*", matchCriteriaId: "3BB525DE-2E08-4848-976E-7DF6C7E19578", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:scr50axe_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "093F98C0-F84F-408C-9835-D63F238E81E9", versionEndExcluding: "1.10\\(acgn.3\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:scr50axe:-:*:*:*:*:*:*:*", matchCriteriaId: "FDE16790-D3CB-48D2-9C4C-ACCED14035BD", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:wx3100-t0_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "1C9392FD-1E26-4C72-94BA-7F71BCB7FD32", versionEndExcluding: "5.50\\(abvl.4.3\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:wx3100-t0:-:*:*:*:*:*:*:*", matchCriteriaId: "C2C56248-D12F-46DC-A52F-0607E4A5DCCC", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:wx3401-b0_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "FEEFBA62-FF41-47F3-81F5-61034302A0E9", versionEndExcluding: "5.17\\(abve.2.5\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:wx3401-b0:-:*:*:*:*:*:*:*", matchCriteriaId: "677C554B-F9C7-4780-97C0-6021146F8B3C", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:wx5600-t0_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "43D29BE5-A0A9-4EA3-A0BB-AF3FCB83B9E5", versionEndExcluding: "5.70\\(aceb.3.2\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:wx5600-t0:-:*:*:*:*:*:*:*", matchCriteriaId: "303DB62A-2A7E-4CB7-ADA0-29C23BFD41BE", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, ], cveTags: [], descriptions: [ { lang: "en", value: "An improper restriction of operations within the bounds of a memory buffer in the parameter type parser of the Zyxel VMG8825-T50K firmware versions through 5.50(ABOM.8)C0 could allow an authenticated attacker with administrator privileges to cause potential memory corruptions, resulting in a thread crash on an affected device.", }, { lang: "es", value: "Una restricción incorrecta de las operaciones dentro de los límites de un búfer de memoria en el analizador de tipo de parámetro de las versiones de firmware Zyxel VMG8825-T50K hasta la 5.50(ABOM.8)C0 podría permitir que un atacante autenticado con privilegios de administrador provoque posibles corrupciones de memoria, lo que resultaría en un bloqueo del hilo en un dispositivo afectado.", }, ], id: "CVE-2024-38266", lastModified: "2025-01-22T22:27:33.937", metrics: { cvssMetricV31: [ { cvssData: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 4.9, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "HIGH", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", version: "3.1", }, exploitabilityScore: 1.2, impactScore: 3.6, source: "security@zyxel.com.tw", type: "Primary", }, ], }, published: "2024-09-24T02:15:02.220", references: [ { source: "security@zyxel.com.tw", tags: [ "Vendor Advisory", ], url: "https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-post-authentication-memory-corruption-vulnerabilities-in-some-dsl-ethernet-cpe-fiber-ont-wifi-extender-and-security-router-versions-09-24-2024", }, ], sourceIdentifier: "security@zyxel.com.tw", vulnStatus: "Analyzed", weaknesses: [ { description: [ { lang: "en", value: "CWE-119", }, ], source: "security@zyxel.com.tw", type: "Secondary", }, { description: [ { lang: "en", value: "CWE-787", }, ], source: "nvd@nist.gov", type: "Primary", }, ], }
Vulnerability from fkie_nvd
Published
2024-12-03 02:15
Modified
2025-01-21 21:18
Severity ?
Summary
A post-authentication buffer overflow vulnerability in the parameter "action" of the CGI program in Zyxel VMG3625-T50B firmware versions through V5.50(ABPM.9.2)C0 could allow an authenticated attacker with administrator privileges to cause a temporary denial of service (DoS) condition against the web management interface by sending a crafted HTTP GET request to a vulnerable device if the function ZyEE is enabled.
References
Impacted products
{ configurations: [ { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:dx3300-t0_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "68D2EEEC-58EA-4444-AFBD-8CDA76DE7C30", versionEndExcluding: "5.50\\(aby.5.4\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:dx3300-t0:-:*:*:*:*:*:*:*", matchCriteriaId: "6D3E176E-F728-4385-8533-4C694D43898A", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:dx3300-t1_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "72C17621-DFBD-43E0-ABCE-31EA1424A95D", versionEndExcluding: "5.50\\(aby.5.4\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:dx3300-t1:-:*:*:*:*:*:*:*", matchCriteriaId: "2456F691-C182-4BE6-A08F-5E1717366DCA", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:dx3301-t0_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "F03882BE-6854-4DA0-AE71-E1DF1D9942F0", versionEndExcluding: "5.50\\(aby.5.4\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:dx3301-t0:-:*:*:*:*:*:*:*", matchCriteriaId: "3BBDC072-5D40-4130-9B5F-22FDA9BF909A", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:dx4510-b0_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "E69CBC66-C2FA-441A-A8DE-DE5ABA996503", versionEndExcluding: "5.17\\(abyl.8\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:dx4510-b0:-:*:*:*:*:*:*:*", matchCriteriaId: "A0338E1C-2509-4510-8C8D-4BD5AEA47D81", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:dx4510-b1_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "99BD602C-4DB1-4C4C-BC2A-EBD52E4C962C", versionEndExcluding: "5.17\\(abyl.8\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:dx4510-b1:-:*:*:*:*:*:*:*", matchCriteriaId: "C8668990-045A-4DDD-9089-DE0025B69765", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:dx5401-b0_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "14B8FE6B-542A-4EE7-8BD3-7E5547E0BB08", versionEndExcluding: "5.17\\(abyo.6.4\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:dx5401-b0:-:*:*:*:*:*:*:*", matchCriteriaId: "B293E564-2C48-442A-A415-34383DF3ADBA", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:dx5401-b1_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "5B632720-75B8-47A7-8694-C27C2CA26D4E", versionEndExcluding: "5.17\\(abyo.6.4\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:dx5401-b1:-:*:*:*:*:*:*:*", matchCriteriaId: "AFE5C53C-4255-4AEE-A49E-36C1A2CF10F5", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:ee6510-10_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "CEC2224E-9481-447A-8E1F-0F6BE170323E", versionEndExcluding: "5.19\\(acjq.1\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:ee6510-10:-:*:*:*:*:*:*:*", matchCriteriaId: "CD4AE46D-E374-4224-9A66-4291B6A10C00", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:ex3300-t0_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "FCAF5BD1-FA85-47D8-AC74-B89C37673872", versionEndExcluding: "5.50\\(aby.5.4\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:ex3300-t0:-:*:*:*:*:*:*:*", matchCriteriaId: "137F8B94-4176-4D9B-8704-28525E7352D1", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:ex3300-t1_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "DED77538-32BD-41D0-AFB0-B523B1B0D626", versionEndExcluding: "5.50\\(aby.5.4\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:ex3300-t1:-:*:*:*:*:*:*:*", matchCriteriaId: "F766221F-7478-4E39-B4CD-A2498ACEE754", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:ex3301-t0_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "15FA1F1B-3DAB-4C9A-9EAC-6F73C91C6000", versionEndExcluding: "5.50\\(aby.5.4\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:ex3301-t0:-:*:*:*:*:*:*:*", matchCriteriaId: "B37B17D8-76CF-4A26-B2DB-41B1BC9FD0A2", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:ex3500-t0_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "31134E19-A43A-4414-AC4A-A4D3D6D89C3F", versionEndExcluding: "5.44\\(achr.3\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:ex3500-t0:-:*:*:*:*:*:*:*", matchCriteriaId: "8714EB1B-38E5-4295-AD26-EE13E2161DEA", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:ex3501-t0_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "7B24B63E-44D9-4967-9A25-0845F07466DE", versionEndExcluding: "5.44\\(achr.3\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:ex3501-t0:-:*:*:*:*:*:*:*", matchCriteriaId: "A98F76BD-0404-46DD-AE6A-EB630FEC8904", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:ex3510-b0_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "7A631CCE-1DBA-45EA-BCAE-35976C74CFB6", versionEndExcluding: "5.17\\(abup.13\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:ex3510-b0:-:*:*:*:*:*:*:*", matchCriteriaId: "E0455EC5-B783-4CDB-9DC0-D8EF377A5F2C", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:ex3510-b1_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "D5F451D2-9058-439C-B065-C635E1833B28", versionEndExcluding: "5.17\\(abup.13\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:ex3510-b1:-:*:*:*:*:*:*:*", matchCriteriaId: "3F955BD9-4D44-46BE-8605-51C6250A74D9", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:ex5401-b0_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "08F959D0-DAF0-4D07-811C-54E780ABB35E", versionEndExcluding: "5.17\\(abyo.6.4\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:ex5401-b0:-:*:*:*:*:*:*:*", matchCriteriaId: "6B1B9D0C-AB6C-43E1-BFCA-50EF231510FC", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:ex5401-b1_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "4CE7E255-C846-4509-A6CE-CBC50C0E5EE5", versionEndExcluding: "5.17\\(abyo.6.4\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:ex5401-b1:-:*:*:*:*:*:*:*", matchCriteriaId: "7213FA12-5CD6-4E9B-8387-A52AEF17EA10", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:ex5501-b0_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "F887CE60-20C2-4301-B515-5C14C9C8D805", versionEndExcluding: "5.17\\(abry.5.3\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:ex5501-b0:-:*:*:*:*:*:*:*", matchCriteriaId: "88B8CDD0-E73A-4FAA-9964-D8C09949CB32", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:ex5510-b0_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "568E5F9E-EFFE-4D1B-B06B-EED70C27985B", versionEndExcluding: "5.17\\(abqx.11\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:ex5510-b0:-:*:*:*:*:*:*:*", matchCriteriaId: "E82D41CC-2EB3-4892-8383-FB2C9EC64D9E", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:ex5600-t1_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "CAF44159-2967-4DDD-8AD8-DE16871899D7", versionEndExcluding: "5.70\\(acdz.3.4\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:ex5600-t1:-:*:*:*:*:*:*:*", matchCriteriaId: "021CFB91-4627-4080-BF09-0BB5EFA708DD", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:ex5601-t0_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "43F04ACC-EED8-4800-BA30-3FC704AF5D6C", versionEndExcluding: "5.70\\(acdz.3.4\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:ex5601-t0:-:*:*:*:*:*:*:*", matchCriteriaId: "ABFF2039-5DCC-4850-8BDA-3D418629C226", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:ex5601-t1_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "435327F5-1A4D-46BA-B572-0771BAD3215F", versionEndExcluding: "5.70\\(acdz.3.4\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:ex5601-t1:-:*:*:*:*:*:*:*", matchCriteriaId: "D629D4B6-B2F2-45F1-9295-71751570C231", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:ex7501-b0_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "116A0A50-6379-4D72-8059-4D74FA208140", versionEndExcluding: "5.18\\(achn.1.3\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:ex7501-b0:-:*:*:*:*:*:*:*", matchCriteriaId: "1CE049DE-A5DA-4A4F-BA30-BBD09FF34DE0", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:emg3525-t50b_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "B992C7F8-F4DF-4426-ACFE-B1EF7DB26E53", versionEndExcluding: "5.50\\(abpm.9.3\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:emg3525-t50b:-:*:*:*:*:*:*:*", matchCriteriaId: "9259E2F6-885D-4B44-8D40-20758DA599D2", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:emg5523-t50b_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "93D83C92-EE57-48F4-B532-FC13657D0F37", versionEndExcluding: "5.50\\(abpm.9.3\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:emg5523-t50b:-:*:*:*:*:*:*:*", matchCriteriaId: "F3ECE0EB-C429-4716-ABFB-73540847EB9E", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:emg5723-t50k_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "131D1D3D-382A-4563-B608-3848AACDF8A0", versionEndExcluding: "5.50\\(abom.8.5\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:emg5723-t50k:-:*:*:*:*:*:*:*", matchCriteriaId: "B18982B2-E575-478E-A2B4-0932DE329056", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:vmg3625-t50b_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "DC43957D-D4F5-4D72-9876-C2796F9714CD", versionEndExcluding: "5.50\\(abpm.9.3\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:vmg3625-t50b:-:*:*:*:*:*:*:*", matchCriteriaId: "BB5E8468-D12F-4CBE-AC7E-27D5A928A85A", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:vmg3927-t50k_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "F5030BD1-0653-4431-87B9-07CA0C1FDE33", versionEndExcluding: "5.50\\(abom.8.5\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:vmg3927-t50k:-:*:*:*:*:*:*:*", matchCriteriaId: "1B33AE56-3948-494B-9E23-54D939DF0D3E", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:vmg8623-t50b_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "916BC802-CBB6-43FE-91D2-76EFA752481C", versionEndExcluding: "5.50\\(abpm.9.3\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:vmg8623-t50b:-:*:*:*:*:*:*:*", matchCriteriaId: "C3535B63-318C-4EB5-ADC8-0AF3FB443DFC", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:vmg8825-t50k_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "FA0D8789-938A-475D-B105-64B225BABD97", versionEndExcluding: "5.50\\(abom.8.5\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:vmg8825-t50k:-:*:*:*:*:*:*:*", matchCriteriaId: "D4C2320B-52DF-4F86-86D2-42FB62337773", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:ax7501-b0_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "F525A6F3-7510-47EF-AD60-A05214BEAFF8", versionEndExcluding: "5.17\\(abpc.5.3\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:ax7501-b0:-:*:*:*:*:*:*:*", matchCriteriaId: "78473083-F702-4B81-AAA0-B66A0984FF6B", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:ax7501-b1_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "77887B8D-E582-41FC-8ED5-11D631C5A062", versionEndExcluding: "5.17\\(abpc.5.3\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:ax7501-b1:-:*:*:*:*:*:*:*", matchCriteriaId: "780BBA7D-7E2C-4624-AA15-8A51F3DF428F", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:ex3600-t0_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "F55E0C82-22FD-4345-BA36-3A2F29216AD3", versionEndExcluding: "5.70\\(acif.0.4\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:ex3600-t0:-:*:*:*:*:*:*:*", matchCriteriaId: "D3BCC6A9-1CAE-459D-BE7D-AAB956BD1B92", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:px3321-t1_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "A23D6389-D322-4EC0-847A-488B735CE373", versionEndExcluding: "5.44\\(acjb.1.1\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:px3321-t1:-:*:*:*:*:*:*:*", matchCriteriaId: "3BB525DE-2E08-4848-976E-7DF6C7E19578", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:px3321-t1_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "A6DBE5D0-F363-4EDA-8CE9-14F2B2B0C19D", versionEndExcluding: "5.44\\(achk.0.3\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:px3321-t1:-:*:*:*:*:*:*:*", matchCriteriaId: "3BB525DE-2E08-4848-976E-7DF6C7E19578", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:px5301-t0_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "2213D90C-25CE-4A61-8479-1BC87DF35A80", versionEndExcluding: "5.44\\(ackb.0.1\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:px5301-t0:-:*:*:*:*:*:*:*", matchCriteriaId: "7EBB4C27-DAEB-4297-98DC-3B22353B5184", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:wx5600-t0_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "5F48FFD6-108C-459D-96D8-5ABE4F10681A", versionEndExcluding: "5.70\\(aceb.3.3\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:wx5600-t0:-:*:*:*:*:*:*:*", matchCriteriaId: "303DB62A-2A7E-4CB7-ADA0-29C23BFD41BE", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, ], cveTags: [], descriptions: [ { lang: "en", value: "A post-authentication buffer overflow vulnerability in the parameter \"action\" of the CGI program in Zyxel VMG3625-T50B firmware versions through V5.50(ABPM.9.2)C0 could allow an authenticated attacker with administrator privileges to cause a temporary denial of service (DoS) condition against the web management interface by sending a crafted HTTP GET request to a vulnerable device if the function ZyEE is enabled.", }, { lang: "es", value: " Una vulnerabilidad de desbordamiento de búfer posterior a la autenticación en el parámetro \"acción\" del programa CGI en las versiones de firmware Zyxel VMG3625-T50B hasta V5.50(ABPM.9.2)C0 podría permitir que un atacante autenticado con privilegios de administrador provoque una condición de denegación de servicio (DoS) temporal contra la interfaz de administración web al enviar una solicitud HTTP GET manipulada a un dispositivo vulnerable si la función ZyEE está habilitada.", }, ], id: "CVE-2024-9197", lastModified: "2025-01-21T21:18:24.393", metrics: { cvssMetricV31: [ { cvssData: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 4.9, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "HIGH", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", version: "3.1", }, exploitabilityScore: 1.2, impactScore: 3.6, source: "security@zyxel.com.tw", type: "Primary", }, ], }, published: "2024-12-03T02:15:17.773", references: [ { source: "security@zyxel.com.tw", tags: [ "Vendor Advisory", ], url: "https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-buffer-overflow-and-post-authentication-command-injection-vulnerabilities-in-some-4g-lte-5g-nr-cpe-dsl-ethernet-cpe-fiber-onts-and-wifi-extenders-12-03-2024", }, ], sourceIdentifier: "security@zyxel.com.tw", vulnStatus: "Analyzed", weaknesses: [ { description: [ { lang: "en", value: "CWE-120", }, ], source: "security@zyxel.com.tw", type: "Primary", }, ], }
Vulnerability from fkie_nvd
Published
2024-09-24 02:15
Modified
2024-09-30 15:52
Severity ?
Summary
An improper restriction of operations within the bounds of a memory buffer in the MAC address parser of the Zyxel VMG8825-T50K firmware versions through 5.50(ABOM.8)C0 could allow an authenticated attacker with administrator privileges to cause potential memory corruptions, resulting in a thread crash on an affected device.
References
Impacted products
{ configurations: [ { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:wx5600-t0_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "43D29BE5-A0A9-4EA3-A0BB-AF3FCB83B9E5", versionEndExcluding: "5.70\\(aceb.3.2\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:wx5600-t0:-:*:*:*:*:*:*:*", matchCriteriaId: "303DB62A-2A7E-4CB7-ADA0-29C23BFD41BE", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:wx3401-b0_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "FEEFBA62-FF41-47F3-81F5-61034302A0E9", versionEndExcluding: "5.17\\(abve.2.5\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:wx3401-b0:-:*:*:*:*:*:*:*", matchCriteriaId: "677C554B-F9C7-4780-97C0-6021146F8B3C", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:wx3100-t0_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "1C9392FD-1E26-4C72-94BA-7F71BCB7FD32", versionEndExcluding: "5.50\\(abvl.4.3\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:wx3100-t0:-:*:*:*:*:*:*:*", matchCriteriaId: "C2C56248-D12F-46DC-A52F-0607E4A5DCCC", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:scr50axe_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "093F98C0-F84F-408C-9835-D63F238E81E9", versionEndExcluding: "1.10\\(acgn.3\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:scr50axe:-:*:*:*:*:*:*:*", matchCriteriaId: "FDE16790-D3CB-48D2-9C4C-ACCED14035BD", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:px3321-t1_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "EC1054FD-2E83-457C-9B5C-936813454B0E", versionEndExcluding: "5.44\\(acjb.1\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:px3321-t1:-:*:*:*:*:*:*:*", matchCriteriaId: "3BB525DE-2E08-4848-976E-7DF6C7E19578", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:pm7300-t0_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "7BD127D7-3B27-4D3B-A82C-B08D8BCFACF0", versionEndExcluding: "5.42\\(abyy.2.2\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:pm7300-t0:-:*:*:*:*:*:*:*", matchCriteriaId: "8AD1E2E3-2BB8-4CB3-AF81-C916312FE361", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:pm5100-t0_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "8AD5D584-14FB-424D-9175-A8F122483748", versionEndExcluding: "5.42\\(acbf.2.1\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:pm5100-t0:-:*:*:*:*:*:*:*", matchCriteriaId: "249AF476-CAA4-4C87-8CC3-E0AF15E61F7E", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:pm3100-t0_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "EF26B807-83DE-4D66-AB11-C8FF20D579D8", versionEndExcluding: "5.42\\(acbf.2.1\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:pm3100-t0:-:*:*:*:*:*:*:*", matchCriteriaId: "F78F88D4-A782-4075-A3CB-A728CE4014DF", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:ax7501-b1_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "61AC6D95-80A9-447F-9CB4-6CCA3A86334B", versionEndExcluding: "5.17\\(abpc.5.2\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:ax7501-b1:-:*:*:*:*:*:*:*", matchCriteriaId: "780BBA7D-7E2C-4624-AA15-8A51F3DF428F", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:vmg8825-t50k_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "B2781DE8-ADD6-48EF-8FC5-D2DBAEC44E8D", versionEndExcluding: "5.50\\(abom.8.4\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:vmg8825-t50k:-:*:*:*:*:*:*:*", matchCriteriaId: "D4C2320B-52DF-4F86-86D2-42FB62337773", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:vmg8623-t50b_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "191B287A-F923-42EE-81F5-A8895F15ABF6", versionEndExcluding: "5.50\\(abpm.9.2\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:vmg8623-t50b:-:*:*:*:*:*:*:*", matchCriteriaId: "C3535B63-318C-4EB5-ADC8-0AF3FB443DFC", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:vmg4005-b60a_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "2C7BE424-6E8A-485E-9F20-CCE34EE6BD17", versionEndExcluding: "5.17\\(abqa.2.2\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:vmg4005-b60a:-:*:*:*:*:*:*:*", matchCriteriaId: "30C1B91D-3EA0-4A1D-833A-6767A6C84DA3", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:vmg4005-b50a_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "71020993-535B-420A-A158-1406C8A611A2", versionEndExcluding: "5.17\\(abqa.2.2\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:vmg4005-b50a:-:*:*:*:*:*:*:*", matchCriteriaId: "88F74228-AC0C-4150-974D-54D77BBF9A90", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:vmg3927-t50k_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "4555EDDD-B50A-41F1-B603-D384DE0CC42A", versionEndExcluding: "5.50\\(abom.8.4\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:vmg3927-t50k:-:*:*:*:*:*:*:*", matchCriteriaId: "1B33AE56-3948-494B-9E23-54D939DF0D3E", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:vmg3625-t50b_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "A5EB06CB-BCFB-4EBF-A1C6-0A72DD9C56D8", versionEndExcluding: "5.50\\(abpm.9.2\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:vmg3625-t50b:-:*:*:*:*:*:*:*", matchCriteriaId: "BB5E8468-D12F-4CBE-AC7E-27D5A928A85A", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:emg5723-t50k_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "3530C6BA-5001-4BE2-B5EF-1A2638B234FF", versionEndExcluding: "5.50\\(abom.8.4\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:emg5723-t50k:-:*:*:*:*:*:*:*", matchCriteriaId: "B18982B2-E575-478E-A2B4-0932DE329056", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:emg5523-t50b_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "357C7DEF-891E-4D2D-9975-785E190B0E28", versionEndExcluding: "5.50\\(abpm.9.2\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:emg5523-t50b:-:*:*:*:*:*:*:*", matchCriteriaId: "F3ECE0EB-C429-4716-ABFB-73540847EB9E", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:emg3525-t50b_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "8657DD28-3CBB-4828-927A-07DFF03E07DC", versionEndExcluding: "5.50\\(abpm.9.2\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:emg3525-t50b:-:*:*:*:*:*:*:*", matchCriteriaId: "9259E2F6-885D-4B44-8D40-20758DA599D2", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:ex7710-b0_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "50F8A5D1-04C5-4187-AD53-A7BAEBB2D5F3", versionEndExcluding: "5.18\\(acak.1\\)c1", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:ex7710-b0:-:*:*:*:*:*:*:*", matchCriteriaId: "07727D9C-723B-4761-B6B6-07FE1784D3C1", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:ex7501-b0_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "CE07CE74-7E9A-4319-A04B-FAB27DF20A5E", versionEndExcluding: "5.18\\(achn.1.2\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:ex7501-b0:-:*:*:*:*:*:*:*", matchCriteriaId: "1CE049DE-A5DA-4A4F-BA30-BBD09FF34DE0", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:ex5601-t1_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "8BBBF350-66DE-4337-8E95-F1C5D75D5151", versionEndExcluding: "5.70\\(acdz.3.2\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:ex5601-t1:-:*:*:*:*:*:*:*", matchCriteriaId: "D629D4B6-B2F2-45F1-9295-71751570C231", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:ex5601-t0_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "5222AE4A-192D-4B52-B12A-7DC04047CDD4", versionEndExcluding: "5.70\\(acdz.3.2\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:ex5601-t0:-:*:*:*:*:*:*:*", matchCriteriaId: "ABFF2039-5DCC-4850-8BDA-3D418629C226", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:ex5512-t0_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "E4CB5021-3A4C-4D2E-BC78-4E027DB217E9", versionEndExcluding: "5.70\\(aceg.3\\)c2", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:ex5512-t0:-:*:*:*:*:*:*:*", matchCriteriaId: "F32FA3FB-CE89-4CC1-9D8D-765B90A122DF", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:ex5510-b0_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "37FB6CD6-AA0F-4A4A-9A10-0C0558FFC4FC", versionEndExcluding: "5.17\\(abqx.10\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:ex5510-b0:-:*:*:*:*:*:*:*", matchCriteriaId: "E82D41CC-2EB3-4892-8383-FB2C9EC64D9E", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:ex5401-b1_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "A8CA39B3-1819-4EAF-86AD-AFBA7C22C9AE", versionEndExcluding: "5.17\\(abyo.6.2\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:ex5401-b1:-:*:*:*:*:*:*:*", matchCriteriaId: "7213FA12-5CD6-4E9B-8387-A52AEF17EA10", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:ex5401-b0_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "6938EC2C-CAC9-4A43-8B30-96BD92279087", versionEndExcluding: "5.17\\(abyo.6.2\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:ex5401-b0:-:*:*:*:*:*:*:*", matchCriteriaId: "6B1B9D0C-AB6C-43E1-BFCA-50EF231510FC", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:ex3600-t0_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "0976A6EB-9A37-4316-B204-0E62E8CE832B", versionEndExcluding: "5.70\\(acif.0.3\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:ex3600-t0:-:*:*:*:*:*:*:*", matchCriteriaId: "D3BCC6A9-1CAE-459D-BE7D-AAB956BD1B92", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:ex3510-b1_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "DF914A6C-2C47-4869-9368-6ACC97876D5C", versionEndExcluding: "5.17\\(abup.12\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:ex3510-b1:-:*:*:*:*:*:*:*", matchCriteriaId: "3F955BD9-4D44-46BE-8605-51C6250A74D9", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:ex3510-b0_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "FC4B955B-CDA5-4BBB-8FFD-71394399A6C6", versionEndExcluding: "5.17\\(abup.12\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:ex3510-b0:-:*:*:*:*:*:*:*", matchCriteriaId: "E0455EC5-B783-4CDB-9DC0-D8EF377A5F2C", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:ex3501-t0_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "D72F97BC-0C04-436E-82EC-956164D97608", versionEndExcluding: "5.44\\(achr.2\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:ex3501-t0:-:*:*:*:*:*:*:*", matchCriteriaId: "A98F76BD-0404-46DD-AE6A-EB630FEC8904", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:ex3500-t0_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "BD151CF9-DC45-475A-9128-91102B7CDF34", versionEndExcluding: "5.44\\(achr.2\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:ex3500-t0:-:*:*:*:*:*:*:*", matchCriteriaId: "8714EB1B-38E5-4295-AD26-EE13E2161DEA", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:ex3301-t0_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "6CC5D271-3679-4962-8096-58BC125E553A", versionEndExcluding: "5.50\\(abvy.5.3\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:ex3301-t0:-:*:*:*:*:*:*:*", matchCriteriaId: "B37B17D8-76CF-4A26-B2DB-41B1BC9FD0A2", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:ex3300-t1_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "09AF8A00-ECF7-43EA-98FB-6BDA7C5CAD60", versionEndExcluding: "5.50\\(abvy.5.3\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:ex3300-t1:-:*:*:*:*:*:*:*", matchCriteriaId: "F766221F-7478-4E39-B4CD-A2498ACEE754", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:ex3300-t0_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "E60A1553-6685-4C75-91D0-199AC09558C6", versionEndExcluding: "5.50\\(abvy.5.3\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:ex3300-t0:-:*:*:*:*:*:*:*", matchCriteriaId: "137F8B94-4176-4D9B-8704-28525E7352D1", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:dx5401-b1_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "96DF49B6-9BF6-45FC-BCA5-B612F01AC2E1", versionEndExcluding: "5.17\\(abyo.6.2\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:dx5401-b1:-:*:*:*:*:*:*:*", matchCriteriaId: "AFE5C53C-4255-4AEE-A49E-36C1A2CF10F5", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:dx5401-b0_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "B8AF84D6-113E-49F3-9F3C-7EFE5DFEA8BF", versionEndExcluding: "5.17\\(abyo.6.2\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:dx5401-b0:-:*:*:*:*:*:*:*", matchCriteriaId: "B293E564-2C48-442A-A415-34383DF3ADBA", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:dx4510-b1_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "46E29474-6891-480C-AC09-A3FB21C0D5DB", versionEndExcluding: "5.17\\(abyl.7\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:dx4510-b1:-:*:*:*:*:*:*:*", matchCriteriaId: "C8668990-045A-4DDD-9089-DE0025B69765", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:dx4510-b0_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "344761C5-3143-4B42-869D-B35DEE2C51FE", versionEndExcluding: "5.17\\(abyl.7\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:dx4510-b0:-:*:*:*:*:*:*:*", matchCriteriaId: "A0338E1C-2509-4510-8C8D-4BD5AEA47D81", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:dx3301-t0_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "582711B2-B998-4FF8-8237-99B3B62EDC87", versionEndExcluding: "5.50\\(abvy.5.3\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:dx3301-t0:-:*:*:*:*:*:*:*", matchCriteriaId: "3BBDC072-5D40-4130-9B5F-22FDA9BF909A", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:dx3300-t1_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "F811CD1C-E4D8-43A0-8E95-07CE2566FC72", versionEndExcluding: "5.50\\(abvy.5.3\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:dx3300-t1:-:*:*:*:*:*:*:*", matchCriteriaId: "2456F691-C182-4BE6-A08F-5E1717366DCA", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:dx3300-t0_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "6B3EF633-501B-43DB-8297-D9AF9335B6C1", versionEndExcluding: "5.50\\(abvy.5.3\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:dx3300-t0:-:*:*:*:*:*:*:*", matchCriteriaId: "6D3E176E-F728-4385-8533-4C694D43898A", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, ], cveTags: [], descriptions: [ { lang: "en", value: "An improper restriction of operations within the bounds of a memory buffer in the MAC address parser of the Zyxel VMG8825-T50K firmware versions through 5.50(ABOM.8)C0 could allow an authenticated attacker with administrator privileges to cause potential memory corruptions, resulting in a thread crash on an affected device.", }, { lang: "es", value: "Una restricción incorrecta de las operaciones dentro de los límites de un búfer de memoria en el analizador de direcciones MAC de las versiones de firmware Zyxel VMG8825-T50K hasta la 5.50(ABOM.8)C0 podría permitir que un atacante autenticado con privilegios de administrador provoque posibles corrupciones de memoria, lo que resultaría en un bloqueo del hilo en un dispositivo afectado.", }, ], id: "CVE-2024-38268", lastModified: "2024-09-30T15:52:29.977", metrics: { cvssMetricV31: [ { cvssData: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 4.9, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "HIGH", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", version: "3.1", }, exploitabilityScore: 1.2, impactScore: 3.6, source: "security@zyxel.com.tw", type: "Primary", }, ], }, published: "2024-09-24T02:15:02.987", references: [ { source: "security@zyxel.com.tw", tags: [ "Vendor Advisory", ], url: "https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-post-authentication-memory-corruption-vulnerabilities-in-some-dsl-ethernet-cpe-fiber-ont-wifi-extender-and-security-router-versions-09-24-2024", }, ], sourceIdentifier: "security@zyxel.com.tw", vulnStatus: "Analyzed", weaknesses: [ { description: [ { lang: "en", value: "CWE-119", }, ], source: "security@zyxel.com.tw", type: "Secondary", }, { description: [ { lang: "en", value: "NVD-CWE-noinfo", }, ], source: "nvd@nist.gov", type: "Primary", }, ], }
Vulnerability from fkie_nvd
Published
2024-09-24 02:15
Modified
2024-09-30 15:51
Severity ?
Summary
An improper restriction of operations within the bounds of a memory buffer in the USB file-sharing handler of the Zyxel VMG8825-T50K firmware versions through 5.50(ABOM.8)C0 could allow an authenticated attacker with administrator privileges to cause potential memory corruptions, resulting in a thread crash on an affected device.
References
Impacted products
{ configurations: [ { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:wx5600-t0_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "43D29BE5-A0A9-4EA3-A0BB-AF3FCB83B9E5", versionEndExcluding: "5.70\\(aceb.3.2\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:wx5600-t0:-:*:*:*:*:*:*:*", matchCriteriaId: "303DB62A-2A7E-4CB7-ADA0-29C23BFD41BE", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:wx3401-b0_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "FEEFBA62-FF41-47F3-81F5-61034302A0E9", versionEndExcluding: "5.17\\(abve.2.5\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:wx3401-b0:-:*:*:*:*:*:*:*", matchCriteriaId: "677C554B-F9C7-4780-97C0-6021146F8B3C", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:wx3100-t0_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "1C9392FD-1E26-4C72-94BA-7F71BCB7FD32", versionEndExcluding: "5.50\\(abvl.4.3\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:wx3100-t0:-:*:*:*:*:*:*:*", matchCriteriaId: "C2C56248-D12F-46DC-A52F-0607E4A5DCCC", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:scr50axe_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "093F98C0-F84F-408C-9835-D63F238E81E9", versionEndExcluding: "1.10\\(acgn.3\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:scr50axe:-:*:*:*:*:*:*:*", matchCriteriaId: "FDE16790-D3CB-48D2-9C4C-ACCED14035BD", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:px3321-t1_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "EC1054FD-2E83-457C-9B5C-936813454B0E", versionEndExcluding: "5.44\\(acjb.1\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:px3321-t1:-:*:*:*:*:*:*:*", matchCriteriaId: "3BB525DE-2E08-4848-976E-7DF6C7E19578", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:pm7300-t0_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "7BD127D7-3B27-4D3B-A82C-B08D8BCFACF0", versionEndExcluding: "5.42\\(abyy.2.2\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:pm7300-t0:-:*:*:*:*:*:*:*", matchCriteriaId: "8AD1E2E3-2BB8-4CB3-AF81-C916312FE361", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:pm5100-t0_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "8AD5D584-14FB-424D-9175-A8F122483748", versionEndExcluding: "5.42\\(acbf.2.1\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:pm5100-t0:-:*:*:*:*:*:*:*", matchCriteriaId: "249AF476-CAA4-4C87-8CC3-E0AF15E61F7E", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:pm3100-t0_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "EF26B807-83DE-4D66-AB11-C8FF20D579D8", versionEndExcluding: "5.42\\(acbf.2.1\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:pm3100-t0:-:*:*:*:*:*:*:*", matchCriteriaId: "F78F88D4-A782-4075-A3CB-A728CE4014DF", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:ax7501-b1_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "61AC6D95-80A9-447F-9CB4-6CCA3A86334B", versionEndExcluding: "5.17\\(abpc.5.2\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:ax7501-b1:-:*:*:*:*:*:*:*", matchCriteriaId: "780BBA7D-7E2C-4624-AA15-8A51F3DF428F", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:vmg8825-t50k_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "B2781DE8-ADD6-48EF-8FC5-D2DBAEC44E8D", versionEndExcluding: "5.50\\(abom.8.4\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:vmg8825-t50k:-:*:*:*:*:*:*:*", matchCriteriaId: "D4C2320B-52DF-4F86-86D2-42FB62337773", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:vmg8623-t50b_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "191B287A-F923-42EE-81F5-A8895F15ABF6", versionEndExcluding: "5.50\\(abpm.9.2\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:vmg8623-t50b:-:*:*:*:*:*:*:*", matchCriteriaId: "C3535B63-318C-4EB5-ADC8-0AF3FB443DFC", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:vmg4005-b60a_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "2C7BE424-6E8A-485E-9F20-CCE34EE6BD17", versionEndExcluding: "5.17\\(abqa.2.2\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:vmg4005-b60a:-:*:*:*:*:*:*:*", matchCriteriaId: "30C1B91D-3EA0-4A1D-833A-6767A6C84DA3", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:vmg4005-b50a_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "71020993-535B-420A-A158-1406C8A611A2", versionEndExcluding: "5.17\\(abqa.2.2\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:vmg4005-b50a:-:*:*:*:*:*:*:*", matchCriteriaId: "88F74228-AC0C-4150-974D-54D77BBF9A90", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:vmg3927-t50k_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "4555EDDD-B50A-41F1-B603-D384DE0CC42A", versionEndExcluding: "5.50\\(abom.8.4\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:vmg3927-t50k:-:*:*:*:*:*:*:*", matchCriteriaId: "1B33AE56-3948-494B-9E23-54D939DF0D3E", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:vmg3625-t50b_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "A5EB06CB-BCFB-4EBF-A1C6-0A72DD9C56D8", versionEndExcluding: "5.50\\(abpm.9.2\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:vmg3625-t50b:-:*:*:*:*:*:*:*", matchCriteriaId: "BB5E8468-D12F-4CBE-AC7E-27D5A928A85A", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:emg5723-t50k_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "3530C6BA-5001-4BE2-B5EF-1A2638B234FF", versionEndExcluding: "5.50\\(abom.8.4\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:emg5723-t50k:-:*:*:*:*:*:*:*", matchCriteriaId: "B18982B2-E575-478E-A2B4-0932DE329056", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:emg5523-t50b_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "357C7DEF-891E-4D2D-9975-785E190B0E28", versionEndExcluding: "5.50\\(abpm.9.2\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:emg5523-t50b:-:*:*:*:*:*:*:*", matchCriteriaId: "F3ECE0EB-C429-4716-ABFB-73540847EB9E", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:emg3525-t50b_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "8657DD28-3CBB-4828-927A-07DFF03E07DC", versionEndExcluding: "5.50\\(abpm.9.2\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:emg3525-t50b:-:*:*:*:*:*:*:*", matchCriteriaId: "9259E2F6-885D-4B44-8D40-20758DA599D2", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:ex7710-b0_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "50F8A5D1-04C5-4187-AD53-A7BAEBB2D5F3", versionEndExcluding: "5.18\\(acak.1\\)c1", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:ex7710-b0:-:*:*:*:*:*:*:*", matchCriteriaId: "07727D9C-723B-4761-B6B6-07FE1784D3C1", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:ex7501-b0_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "CE07CE74-7E9A-4319-A04B-FAB27DF20A5E", versionEndExcluding: "5.18\\(achn.1.2\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:ex7501-b0:-:*:*:*:*:*:*:*", matchCriteriaId: "1CE049DE-A5DA-4A4F-BA30-BBD09FF34DE0", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:ex5601-t1_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "8BBBF350-66DE-4337-8E95-F1C5D75D5151", versionEndExcluding: "5.70\\(acdz.3.2\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:ex5601-t1:-:*:*:*:*:*:*:*", matchCriteriaId: "D629D4B6-B2F2-45F1-9295-71751570C231", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:ex5601-t0_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "5222AE4A-192D-4B52-B12A-7DC04047CDD4", versionEndExcluding: "5.70\\(acdz.3.2\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:ex5601-t0:-:*:*:*:*:*:*:*", matchCriteriaId: "ABFF2039-5DCC-4850-8BDA-3D418629C226", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:ex5512-t0_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "E4CB5021-3A4C-4D2E-BC78-4E027DB217E9", versionEndExcluding: "5.70\\(aceg.3\\)c2", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:ex5512-t0:-:*:*:*:*:*:*:*", matchCriteriaId: "F32FA3FB-CE89-4CC1-9D8D-765B90A122DF", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:ex5510-b0_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "37FB6CD6-AA0F-4A4A-9A10-0C0558FFC4FC", versionEndExcluding: "5.17\\(abqx.10\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:ex5510-b0:-:*:*:*:*:*:*:*", matchCriteriaId: "E82D41CC-2EB3-4892-8383-FB2C9EC64D9E", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:ex5401-b1_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "A8CA39B3-1819-4EAF-86AD-AFBA7C22C9AE", versionEndExcluding: "5.17\\(abyo.6.2\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:ex5401-b1:-:*:*:*:*:*:*:*", matchCriteriaId: "7213FA12-5CD6-4E9B-8387-A52AEF17EA10", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:ex5401-b0_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "6938EC2C-CAC9-4A43-8B30-96BD92279087", versionEndExcluding: "5.17\\(abyo.6.2\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:ex5401-b0:-:*:*:*:*:*:*:*", matchCriteriaId: "6B1B9D0C-AB6C-43E1-BFCA-50EF231510FC", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:ex3600-t0_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "0976A6EB-9A37-4316-B204-0E62E8CE832B", versionEndExcluding: "5.70\\(acif.0.3\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:ex3600-t0:-:*:*:*:*:*:*:*", matchCriteriaId: "D3BCC6A9-1CAE-459D-BE7D-AAB956BD1B92", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:ex3510-b1_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "DF914A6C-2C47-4869-9368-6ACC97876D5C", versionEndExcluding: "5.17\\(abup.12\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:ex3510-b1:-:*:*:*:*:*:*:*", matchCriteriaId: "3F955BD9-4D44-46BE-8605-51C6250A74D9", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:ex3510-b0_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "FC4B955B-CDA5-4BBB-8FFD-71394399A6C6", versionEndExcluding: "5.17\\(abup.12\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:ex3510-b0:-:*:*:*:*:*:*:*", matchCriteriaId: "E0455EC5-B783-4CDB-9DC0-D8EF377A5F2C", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:ex3501-t0_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "D72F97BC-0C04-436E-82EC-956164D97608", versionEndExcluding: "5.44\\(achr.2\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:ex3501-t0:-:*:*:*:*:*:*:*", matchCriteriaId: "A98F76BD-0404-46DD-AE6A-EB630FEC8904", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:ex3500-t0_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "BD151CF9-DC45-475A-9128-91102B7CDF34", versionEndExcluding: "5.44\\(achr.2\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:ex3500-t0:-:*:*:*:*:*:*:*", matchCriteriaId: "8714EB1B-38E5-4295-AD26-EE13E2161DEA", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:ex3301-t0_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "6CC5D271-3679-4962-8096-58BC125E553A", versionEndExcluding: "5.50\\(abvy.5.3\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:ex3301-t0:-:*:*:*:*:*:*:*", matchCriteriaId: "B37B17D8-76CF-4A26-B2DB-41B1BC9FD0A2", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:ex3300-t1_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "09AF8A00-ECF7-43EA-98FB-6BDA7C5CAD60", versionEndExcluding: "5.50\\(abvy.5.3\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:ex3300-t1:-:*:*:*:*:*:*:*", matchCriteriaId: "F766221F-7478-4E39-B4CD-A2498ACEE754", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:ex3300-t0_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "E60A1553-6685-4C75-91D0-199AC09558C6", versionEndExcluding: "5.50\\(abvy.5.3\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:ex3300-t0:-:*:*:*:*:*:*:*", matchCriteriaId: "137F8B94-4176-4D9B-8704-28525E7352D1", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:dx5401-b1_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "96DF49B6-9BF6-45FC-BCA5-B612F01AC2E1", versionEndExcluding: "5.17\\(abyo.6.2\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:dx5401-b1:-:*:*:*:*:*:*:*", matchCriteriaId: "AFE5C53C-4255-4AEE-A49E-36C1A2CF10F5", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:dx5401-b0_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "B8AF84D6-113E-49F3-9F3C-7EFE5DFEA8BF", versionEndExcluding: "5.17\\(abyo.6.2\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:dx5401-b0:-:*:*:*:*:*:*:*", matchCriteriaId: "B293E564-2C48-442A-A415-34383DF3ADBA", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:dx4510-b1_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "46E29474-6891-480C-AC09-A3FB21C0D5DB", versionEndExcluding: "5.17\\(abyl.7\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:dx4510-b1:-:*:*:*:*:*:*:*", matchCriteriaId: "C8668990-045A-4DDD-9089-DE0025B69765", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:dx4510-b0_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "344761C5-3143-4B42-869D-B35DEE2C51FE", versionEndExcluding: "5.17\\(abyl.7\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:dx4510-b0:-:*:*:*:*:*:*:*", matchCriteriaId: "A0338E1C-2509-4510-8C8D-4BD5AEA47D81", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:dx3301-t0_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "582711B2-B998-4FF8-8237-99B3B62EDC87", versionEndExcluding: "5.50\\(abvy.5.3\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:dx3301-t0:-:*:*:*:*:*:*:*", matchCriteriaId: "3BBDC072-5D40-4130-9B5F-22FDA9BF909A", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:dx3300-t1_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "F811CD1C-E4D8-43A0-8E95-07CE2566FC72", versionEndExcluding: "5.50\\(abvy.5.3\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:dx3300-t1:-:*:*:*:*:*:*:*", matchCriteriaId: "2456F691-C182-4BE6-A08F-5E1717366DCA", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zyxel:dx3300-t0_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "6B3EF633-501B-43DB-8297-D9AF9335B6C1", versionEndExcluding: "5.50\\(abvy.5.3\\)c0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zyxel:dx3300-t0:-:*:*:*:*:*:*:*", matchCriteriaId: "6D3E176E-F728-4385-8533-4C694D43898A", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, ], cveTags: [], descriptions: [ { lang: "en", value: "An improper restriction of operations within the bounds of a memory buffer in the USB file-sharing handler of the Zyxel VMG8825-T50K firmware versions through 5.50(ABOM.8)C0 could allow an authenticated attacker with administrator privileges to cause potential memory corruptions, resulting in a thread crash on an affected device.", }, { lang: "es", value: "Una restricción incorrecta de las operaciones dentro de los límites de un búfer de memoria en el controlador de uso compartido de archivos USB de las versiones de firmware Zyxel VMG8825-T50K hasta la 5.50(ABOM.8)C0 podría permitir que un atacante autenticado con privilegios de administrador provoque posibles corrupciones de memoria, lo que resultaría en un bloqueo del hilo en un dispositivo afectado.", }, ], id: "CVE-2024-38269", lastModified: "2024-09-30T15:51:55.567", metrics: { cvssMetricV31: [ { cvssData: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 4.9, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "HIGH", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", version: "3.1", }, exploitabilityScore: 1.2, impactScore: 3.6, source: "security@zyxel.com.tw", type: "Primary", }, ], }, published: "2024-09-24T02:15:03.230", references: [ { source: "security@zyxel.com.tw", tags: [ "Vendor Advisory", ], url: "https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-post-authentication-memory-corruption-vulnerabilities-in-some-dsl-ethernet-cpe-fiber-ont-wifi-extender-and-security-router-versions-09-24-2024", }, ], sourceIdentifier: "security@zyxel.com.tw", vulnStatus: "Analyzed", weaknesses: [ { description: [ { lang: "en", value: "CWE-119", }, ], source: "security@zyxel.com.tw", type: "Secondary", }, { description: [ { lang: "en", value: "NVD-CWE-noinfo", }, ], source: "nvd@nist.gov", type: "Primary", }, ], }
var-202409-1843
Vulnerability from variot
An improper restriction of operations within the bounds of a memory buffer in the USB file-sharing handler of the Zyxel VMG8825-T50K firmware versions through 5.50(ABOM.8)C0 could allow an authenticated attacker with administrator privileges to cause potential memory corruptions, resulting in a thread crash on an affected device. wx5600-t0 firmware, wx3401-b0 firmware, wx3100-t0 firmware etc. ZyXEL There are unspecified vulnerabilities in the product.Service operation interruption (DoS) It may be in a state. Zyxel VMG8825-T50K is an Internet access device from China's Zyxel Corporation.
Zyxel VMG8825-T50K has a buffer overflow vulnerability, which stems from the USB file sharing handler improperly restricting operations within the memory buffer range
Show details on source website{ "@context": { "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#", affected_products: { "@id": "https://www.variotdbs.pl/ref/affected_products", }, configurations: { "@id": "https://www.variotdbs.pl/ref/configurations", }, credits: { "@id": "https://www.variotdbs.pl/ref/credits", }, cvss: { "@id": "https://www.variotdbs.pl/ref/cvss/", }, description: { "@id": "https://www.variotdbs.pl/ref/description/", }, exploit_availability: { "@id": "https://www.variotdbs.pl/ref/exploit_availability/", }, external_ids: { "@id": "https://www.variotdbs.pl/ref/external_ids/", }, iot: { "@id": "https://www.variotdbs.pl/ref/iot/", }, iot_taxonomy: { "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/", }, patch: { "@id": "https://www.variotdbs.pl/ref/patch/", }, problemtype_data: { "@id": "https://www.variotdbs.pl/ref/problemtype_data/", }, references: { "@id": "https://www.variotdbs.pl/ref/references/", }, sources: { "@id": "https://www.variotdbs.pl/ref/sources/", }, sources_release_date: { "@id": "https://www.variotdbs.pl/ref/sources_release_date/", }, sources_update_date: { "@id": "https://www.variotdbs.pl/ref/sources_update_date/", }, threat_type: { "@id": "https://www.variotdbs.pl/ref/threat_type/", }, title: { "@id": "https://www.variotdbs.pl/ref/title/", }, type: { "@id": "https://www.variotdbs.pl/ref/type/", }, }, "@id": "https://www.variotdbs.pl/vuln/VAR-202409-1843", affected_products: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/affected_products#", data: { "@container": "@list", }, sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, "@id": "https://www.variotdbs.pl/ref/sources", }, }, data: [ { model: "dx3301-t0", scope: "lt", trust: 1, vendor: "zyxel", version: "5.50\\(abvy.5.3\\)c0", }, { model: "ex5510-b0", scope: "lt", trust: 1, vendor: "zyxel", version: "5.17\\(abqx.10\\)c0", }, { model: "emg5723-t50k", scope: "lt", trust: 1, vendor: "zyxel", version: "5.50\\(abom.8.4\\)c0", }, { model: "ex3500-t0", scope: "lt", trust: 1, vendor: "zyxel", version: "5.44\\(achr.2\\)c0", }, { model: "wx3401-b0", scope: "lt", trust: 1, vendor: "zyxel", version: "5.17\\(abve.2.5\\)c0", }, { model: "ex5601-t0", scope: "lt", trust: 1, vendor: "zyxel", version: "5.70\\(acdz.3.2\\)c0", }, { model: "ex5512-t0", scope: "lt", trust: 1, vendor: "zyxel", version: "5.70\\(aceg.3\\)c2", }, { model: "vmg4005-b60a", scope: "lt", trust: 1, vendor: "zyxel", version: "5.17\\(abqa.2.2\\)c0", }, { model: "dx3300-t0", scope: "lt", trust: 1, vendor: "zyxel", version: "5.50\\(abvy.5.3\\)c0", }, { model: "ex7710-b0", scope: "lt", trust: 1, vendor: "zyxel", version: "5.18\\(acak.1\\)c1", }, { model: "dx4510-b1", scope: "lt", trust: 1, vendor: "zyxel", version: "5.17\\(abyl.7\\)c0", }, { model: "vmg8825-t50k", scope: "lt", trust: 1, vendor: "zyxel", version: "5.50\\(abom.8.4\\)c0", }, { model: "wx3100-t0", scope: "lt", trust: 1, vendor: "zyxel", version: "5.50\\(abvl.4.3\\)c0", }, { model: "pm7300-t0", scope: "lt", trust: 1, vendor: "zyxel", version: "5.42\\(abyy.2.2\\)c0", }, { model: "emg5523-t50b", scope: "lt", trust: 1, vendor: "zyxel", version: "5.50\\(abpm.9.2\\)c0", }, { model: "ex5401-b0", scope: "lt", trust: 1, vendor: "zyxel", version: "5.17\\(abyo.6.2\\)c0", }, { model: "ex3510-b1", scope: "lt", trust: 1, vendor: "zyxel", version: "5.17\\(abup.12\\)c0", }, { model: "ex3300-t0", scope: "lt", trust: 1, vendor: "zyxel", version: "5.50\\(abvy.5.3\\)c0", }, { model: "vmg4005-b50a", scope: "lt", trust: 1, vendor: "zyxel", version: "5.17\\(abqa.2.2\\)c0", }, { model: "dx3300-t1", scope: "lt", trust: 1, vendor: "zyxel", version: "5.50\\(abvy.5.3\\)c0", }, { model: "pm5100-t0", scope: "lt", trust: 1, vendor: "zyxel", version: "5.42\\(acbf.2.1\\)c0", }, { model: "dx5401-b1", scope: "lt", trust: 1, vendor: "zyxel", version: "5.17\\(abyo.6.2\\)c0", }, { model: "emg3525-t50b", scope: "lt", trust: 1, vendor: "zyxel", version: "5.50\\(abpm.9.2\\)c0", }, { model: "px3321-t1", scope: "lt", trust: 1, vendor: "zyxel", version: "5.44\\(acjb.1\\)c0", }, { model: "ex3301-t0", scope: "lt", trust: 1, vendor: "zyxel", version: "5.50\\(abvy.5.3\\)c0", }, { model: "dx4510-b0", scope: "lt", trust: 1, vendor: "zyxel", version: "5.17\\(abyl.7\\)c0", }, { model: "ex3501-t0", scope: "lt", trust: 1, vendor: "zyxel", version: "5.44\\(achr.2\\)c0", }, { model: "dx5401-b0", scope: "lt", trust: 1, vendor: "zyxel", version: "5.17\\(abyo.6.2\\)c0", }, { model: "ex5401-b1", scope: "lt", trust: 1, vendor: "zyxel", version: "5.17\\(abyo.6.2\\)c0", }, { model: "vmg3625-t50b", scope: "lt", trust: 1, vendor: "zyxel", version: "5.50\\(abpm.9.2\\)c0", }, { model: "vmg8623-t50b", scope: "lt", trust: 1, vendor: "zyxel", version: "5.50\\(abpm.9.2\\)c0", }, { model: "ex5601-t1", scope: "lt", trust: 1, vendor: "zyxel", version: "5.70\\(acdz.3.2\\)c0", }, { model: "vmg3927-t50k", scope: "lt", trust: 1, vendor: "zyxel", version: "5.50\\(abom.8.4\\)c0", }, { model: "wx5600-t0", scope: "lt", trust: 1, vendor: "zyxel", version: "5.70\\(aceb.3.2\\)c0", }, { model: "ax7501-b1", scope: "lt", trust: 1, vendor: "zyxel", version: "5.17\\(abpc.5.2\\)c0", }, { model: "ex7501-b0", scope: "lt", trust: 1, vendor: "zyxel", version: "5.18\\(achn.1.2\\)c0", }, { model: "ex3510-b0", scope: "lt", trust: 1, vendor: "zyxel", version: "5.17\\(abup.12\\)c0", }, { model: "ex3600-t0", scope: "lt", trust: 1, vendor: "zyxel", version: "5.70\\(acif.0.3\\)c0", }, { model: "pm3100-t0", scope: "lt", trust: 1, vendor: "zyxel", version: "5.42\\(acbf.2.1\\)c0", }, { model: "scr50axe", scope: "lt", trust: 1, vendor: "zyxel", version: "1.10\\(acgn.3\\)c0", }, { model: "ex3300-t1", scope: "lt", trust: 1, vendor: "zyxel", version: "5.50\\(abvy.5.3\\)c0", }, { model: "vmg3625-t50b", scope: null, trust: 0.8, vendor: "zyxel", version: null, }, { model: "wx5600-t0", scope: null, trust: 0.8, vendor: "zyxel", version: null, }, { model: "vmg3927-t50k", scope: null, trust: 0.8, vendor: "zyxel", version: null, }, { model: "wx3100-t0", scope: null, trust: 0.8, vendor: "zyxel", version: null, }, { model: "emg5523-t50b", scope: null, trust: 0.8, vendor: "zyxel", version: null, }, { model: "scr50axe", scope: null, trust: 0.8, vendor: "zyxel", version: null, }, { model: "vmg4005-b50a", scope: null, trust: 0.8, vendor: "zyxel", version: null, }, { model: "ex7501-b0", scope: null, trust: 0.8, vendor: "zyxel", version: null, }, { model: "vmg8623-t50b", scope: null, trust: 0.8, vendor: "zyxel", version: null, }, { model: "vmg4005-b60a", scope: null, trust: 0.8, vendor: "zyxel", version: null, }, { model: "pm7300-t0", scope: null, trust: 0.8, vendor: "zyxel", version: null, }, { model: "px3321-t1", scope: null, trust: 0.8, vendor: "zyxel", version: null, }, { model: "vmg8825-t50k", scope: null, trust: 0.8, vendor: "zyxel", version: null, }, { model: "pm3100-t0", scope: null, trust: 0.8, vendor: "zyxel", version: null, }, { model: "ex7710-b0", scope: null, trust: 0.8, vendor: "zyxel", version: null, }, { model: "ax7501-b1", scope: null, trust: 0.8, vendor: "zyxel", version: null, }, { model: "emg5723-t50k", scope: null, trust: 0.8, vendor: "zyxel", version: null, }, { model: "emg3525-t50b", scope: null, trust: 0.8, vendor: "zyxel", version: null, }, { model: "wx3401-b0", scope: null, trust: 0.8, vendor: "zyxel", version: null, }, { model: "pm5100-t0", scope: null, trust: 0.8, vendor: "zyxel", version: null, }, { model: "vmg8825-t50k <=5.50 c0", scope: null, trust: 0.6, vendor: "zyxel", version: null, }, ], sources: [ { db: "CNVD", id: "CNVD-2024-40286", }, { db: "JVNDB", id: "JVNDB-2024-009433", }, { db: "NVD", id: "CVE-2024-38269", }, ], }, cve: "CVE-2024-38269", cvss: { "@context": { cvssV2: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#", }, "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2", }, cvssV3: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#", }, "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/", }, severity: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/cvss/severity#", }, "@id": "https://www.variotdbs.pl/ref/cvss/severity", }, sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, "@id": "https://www.variotdbs.pl/ref/sources", }, }, data: [ { cvssV2: [ { accessComplexity: "LOW", accessVector: "NETWORK", authentication: "MULTIPLE", author: "CNVD", availabilityImpact: "COMPLETE", baseScore: 6.1, confidentialityImpact: "NONE", exploitabilityScore: 6.4, id: "CNVD-2024-40286", impactScore: 6.9, integrityImpact: "NONE", severity: "MEDIUM", trust: 0.6, vectorString: "AV:N/AC:L/Au:M/C:N/I:N/A:C", version: "2.0", }, ], cvssV3: [ { attackComplexity: "LOW", attackVector: "NETWORK", author: "security@zyxel.com.tw", availabilityImpact: "HIGH", baseScore: 4.9, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", exploitabilityScore: 1.2, id: "CVE-2024-38269", impactScore: 3.6, integrityImpact: "NONE", privilegesRequired: "HIGH", scope: "UNCHANGED", trust: 1, userInteraction: "NONE", vectorString: "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", version: "3.1", }, { attackComplexity: "Low", attackVector: "Network", author: "OTHER", availabilityImpact: "High", baseScore: 4.9, baseSeverity: "Medium", confidentialityImpact: "None", exploitabilityScore: null, id: "JVNDB-2024-009433", impactScore: null, integrityImpact: "None", privilegesRequired: "High", scope: "Unchanged", trust: 0.8, userInteraction: "None", vectorString: "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", version: "3.0", }, ], severity: [ { author: "security@zyxel.com.tw", id: "CVE-2024-38269", trust: 1, value: "MEDIUM", }, { author: "OTHER", id: "JVNDB-2024-009433", trust: 0.8, value: "Medium", }, { author: "CNVD", id: "CNVD-2024-40286", trust: 0.6, value: "MEDIUM", }, ], }, ], sources: [ { db: "CNVD", id: "CNVD-2024-40286", }, { db: "JVNDB", id: "JVNDB-2024-009433", }, { db: "NVD", id: "CVE-2024-38269", }, ], }, description: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/description#", sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, }, }, data: "An improper restriction of operations within the bounds of a memory buffer in the USB file-sharing handler of the Zyxel VMG8825-T50K firmware versions through 5.50(ABOM.8)C0 could allow an authenticated attacker with administrator privileges to cause potential memory corruptions, resulting in a thread crash on an affected device. wx5600-t0 firmware, wx3401-b0 firmware, wx3100-t0 firmware etc. ZyXEL There are unspecified vulnerabilities in the product.Service operation interruption (DoS) It may be in a state. Zyxel VMG8825-T50K is an Internet access device from China's Zyxel Corporation. \n\nZyxel VMG8825-T50K has a buffer overflow vulnerability, which stems from the USB file sharing handler improperly restricting operations within the memory buffer range", sources: [ { db: "NVD", id: "CVE-2024-38269", }, { db: "JVNDB", id: "JVNDB-2024-009433", }, { db: "CNVD", id: "CNVD-2024-40286", }, ], trust: 2.16, }, external_ids: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/external_ids#", data: { "@container": "@list", }, sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, }, }, data: [ { db: "NVD", id: "CVE-2024-38269", trust: 3.2, }, { db: "JVNDB", id: "JVNDB-2024-009433", trust: 0.8, }, { db: "CNVD", id: "CNVD-2024-40286", trust: 0.6, }, ], sources: [ { db: "CNVD", id: "CNVD-2024-40286", }, { db: "JVNDB", id: "JVNDB-2024-009433", }, { db: "NVD", id: "CVE-2024-38269", }, ], }, id: "VAR-202409-1843", iot: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/iot#", sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, }, }, data: true, sources: [ { db: "CNVD", id: "CNVD-2024-40286", }, ], trust: 0.06, }, iot_taxonomy: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#", data: { "@container": "@list", }, sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, }, }, data: [ { category: [ "Network device", ], sub_category: null, trust: 0.6, }, ], sources: [ { db: "CNVD", id: "CNVD-2024-40286", }, ], }, last_update_date: "2024-10-13T23:13:54.758000Z", problemtype_data: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#", sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, }, }, data: [ { problemtype: "CWE-119", trust: 1, }, { problemtype: "NVD-CWE-noinfo", trust: 1, }, { problemtype: "Buffer error (CWE-119) [ others ]", trust: 0.8, }, { problemtype: " Lack of information (CWE-noinfo) [NVD evaluation ]", trust: 0.8, }, ], sources: [ { db: "JVNDB", id: "JVNDB-2024-009433", }, { db: "NVD", id: "CVE-2024-38269", }, ], }, references: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/references#", data: { "@container": "@list", }, sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, }, }, data: [ { trust: 1.8, url: "https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-post-authentication-memory-corruption-vulnerabilities-in-some-dsl-ethernet-cpe-fiber-ont-wifi-extender-and-security-router-versions-09-24-2024", }, { trust: 1.4, url: "https://nvd.nist.gov/vuln/detail/cve-2024-38269", }, ], sources: [ { db: "CNVD", id: "CNVD-2024-40286", }, { db: "JVNDB", id: "JVNDB-2024-009433", }, { db: "NVD", id: "CVE-2024-38269", }, ], }, sources: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", data: { "@container": "@list", }, }, data: [ { db: "CNVD", id: "CNVD-2024-40286", }, { db: "JVNDB", id: "JVNDB-2024-009433", }, { db: "NVD", id: "CVE-2024-38269", }, ], }, sources_release_date: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#", data: { "@container": "@list", }, }, data: [ { date: "2024-10-10T00:00:00", db: "CNVD", id: "CNVD-2024-40286", }, { date: "2024-10-01T00:00:00", db: "JVNDB", id: "JVNDB-2024-009433", }, { date: "2024-09-24T02:15:03.230000", db: "NVD", id: "CVE-2024-38269", }, ], }, sources_update_date: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#", data: { "@container": "@list", }, }, data: [ { date: "2024-10-11T00:00:00", db: "CNVD", id: "CNVD-2024-40286", }, { date: "2024-10-01T00:47:00", db: "JVNDB", id: "JVNDB-2024-009433", }, { date: "2024-09-30T15:51:55.567000", db: "NVD", id: "CVE-2024-38269", }, ], }, title: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/title#", sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, }, }, data: "plural ZyXEL Product vulnerabilities", sources: [ { db: "JVNDB", id: "JVNDB-2024-009433", }, ], trust: 0.8, }, }