var-202409-1843
Vulnerability from variot
An improper restriction of operations within the bounds of a memory buffer in the USB file-sharing handler of the Zyxel VMG8825-T50K firmware versions through 5.50(ABOM.8)C0 could allow an authenticated attacker with administrator privileges to cause potential memory corruptions, resulting in a thread crash on an affected device. wx5600-t0 firmware, wx3401-b0 firmware, wx3100-t0 firmware etc. ZyXEL There are unspecified vulnerabilities in the product.Service operation interruption (DoS) It may be in a state. Zyxel VMG8825-T50K is an Internet access device from China's Zyxel Corporation.
Zyxel VMG8825-T50K has a buffer overflow vulnerability, which stems from the USB file sharing handler improperly restricting operations within the memory buffer range
Show details on source website{ "@context": { "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#", affected_products: { "@id": "https://www.variotdbs.pl/ref/affected_products", }, configurations: { "@id": "https://www.variotdbs.pl/ref/configurations", }, credits: { "@id": "https://www.variotdbs.pl/ref/credits", }, cvss: { "@id": "https://www.variotdbs.pl/ref/cvss/", }, description: { "@id": "https://www.variotdbs.pl/ref/description/", }, exploit_availability: { "@id": "https://www.variotdbs.pl/ref/exploit_availability/", }, external_ids: { "@id": "https://www.variotdbs.pl/ref/external_ids/", }, iot: { "@id": "https://www.variotdbs.pl/ref/iot/", }, iot_taxonomy: { "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/", }, patch: { "@id": "https://www.variotdbs.pl/ref/patch/", }, problemtype_data: { "@id": "https://www.variotdbs.pl/ref/problemtype_data/", }, references: { "@id": "https://www.variotdbs.pl/ref/references/", }, sources: { "@id": "https://www.variotdbs.pl/ref/sources/", }, sources_release_date: { "@id": "https://www.variotdbs.pl/ref/sources_release_date/", }, sources_update_date: { "@id": "https://www.variotdbs.pl/ref/sources_update_date/", }, threat_type: { "@id": "https://www.variotdbs.pl/ref/threat_type/", }, title: { "@id": "https://www.variotdbs.pl/ref/title/", }, type: { "@id": "https://www.variotdbs.pl/ref/type/", }, }, "@id": "https://www.variotdbs.pl/vuln/VAR-202409-1843", affected_products: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/affected_products#", data: { "@container": "@list", }, sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, "@id": "https://www.variotdbs.pl/ref/sources", }, }, data: [ { model: "dx3301-t0", scope: "lt", trust: 1, vendor: "zyxel", version: "5.50\\(abvy.5.3\\)c0", }, { model: "ex5510-b0", scope: "lt", trust: 1, vendor: "zyxel", version: "5.17\\(abqx.10\\)c0", }, { model: "emg5723-t50k", scope: "lt", trust: 1, vendor: "zyxel", version: "5.50\\(abom.8.4\\)c0", }, { model: "ex3500-t0", scope: "lt", trust: 1, vendor: "zyxel", version: "5.44\\(achr.2\\)c0", }, { model: "wx3401-b0", scope: "lt", trust: 1, vendor: "zyxel", version: "5.17\\(abve.2.5\\)c0", }, { model: "ex5601-t0", scope: "lt", trust: 1, vendor: "zyxel", version: "5.70\\(acdz.3.2\\)c0", }, { model: "ex5512-t0", scope: "lt", trust: 1, vendor: "zyxel", version: "5.70\\(aceg.3\\)c2", }, { model: "vmg4005-b60a", scope: "lt", trust: 1, vendor: "zyxel", version: "5.17\\(abqa.2.2\\)c0", }, { model: "dx3300-t0", scope: "lt", trust: 1, vendor: "zyxel", version: "5.50\\(abvy.5.3\\)c0", }, { model: "ex7710-b0", scope: "lt", trust: 1, vendor: "zyxel", version: "5.18\\(acak.1\\)c1", }, { model: "dx4510-b1", scope: "lt", trust: 1, vendor: "zyxel", version: "5.17\\(abyl.7\\)c0", }, { model: "vmg8825-t50k", scope: "lt", trust: 1, vendor: "zyxel", version: "5.50\\(abom.8.4\\)c0", }, { model: "wx3100-t0", scope: "lt", trust: 1, vendor: "zyxel", version: "5.50\\(abvl.4.3\\)c0", }, { model: "pm7300-t0", scope: "lt", trust: 1, vendor: "zyxel", version: "5.42\\(abyy.2.2\\)c0", }, { model: "emg5523-t50b", scope: "lt", trust: 1, vendor: "zyxel", version: "5.50\\(abpm.9.2\\)c0", }, { model: "ex5401-b0", scope: "lt", trust: 1, vendor: "zyxel", version: "5.17\\(abyo.6.2\\)c0", }, { model: "ex3510-b1", scope: "lt", trust: 1, vendor: "zyxel", version: "5.17\\(abup.12\\)c0", }, { model: "ex3300-t0", scope: "lt", trust: 1, vendor: "zyxel", version: "5.50\\(abvy.5.3\\)c0", }, { model: "vmg4005-b50a", scope: "lt", trust: 1, vendor: "zyxel", version: "5.17\\(abqa.2.2\\)c0", }, { model: "dx3300-t1", scope: "lt", trust: 1, vendor: "zyxel", version: "5.50\\(abvy.5.3\\)c0", }, { model: "pm5100-t0", scope: "lt", trust: 1, vendor: "zyxel", version: "5.42\\(acbf.2.1\\)c0", }, { model: "dx5401-b1", scope: "lt", trust: 1, vendor: "zyxel", version: "5.17\\(abyo.6.2\\)c0", }, { model: "emg3525-t50b", scope: "lt", trust: 1, vendor: "zyxel", version: "5.50\\(abpm.9.2\\)c0", }, { model: "px3321-t1", scope: "lt", trust: 1, vendor: "zyxel", version: "5.44\\(acjb.1\\)c0", }, { model: "ex3301-t0", scope: "lt", trust: 1, vendor: "zyxel", version: "5.50\\(abvy.5.3\\)c0", }, { model: "dx4510-b0", scope: "lt", trust: 1, vendor: "zyxel", version: "5.17\\(abyl.7\\)c0", }, { model: "ex3501-t0", scope: "lt", trust: 1, vendor: "zyxel", version: "5.44\\(achr.2\\)c0", }, { model: "dx5401-b0", scope: "lt", trust: 1, vendor: "zyxel", version: "5.17\\(abyo.6.2\\)c0", }, { model: "ex5401-b1", scope: "lt", trust: 1, vendor: "zyxel", version: "5.17\\(abyo.6.2\\)c0", }, { model: "vmg3625-t50b", scope: "lt", trust: 1, vendor: "zyxel", version: "5.50\\(abpm.9.2\\)c0", }, { model: "vmg8623-t50b", scope: "lt", trust: 1, vendor: "zyxel", version: "5.50\\(abpm.9.2\\)c0", }, { model: "ex5601-t1", scope: "lt", trust: 1, vendor: "zyxel", version: "5.70\\(acdz.3.2\\)c0", }, { model: "vmg3927-t50k", scope: "lt", trust: 1, vendor: "zyxel", version: "5.50\\(abom.8.4\\)c0", }, { model: "wx5600-t0", scope: "lt", trust: 1, vendor: "zyxel", version: "5.70\\(aceb.3.2\\)c0", }, { model: "ax7501-b1", scope: "lt", trust: 1, vendor: "zyxel", version: "5.17\\(abpc.5.2\\)c0", }, { model: "ex7501-b0", scope: "lt", trust: 1, vendor: "zyxel", version: "5.18\\(achn.1.2\\)c0", }, { model: "ex3510-b0", scope: "lt", trust: 1, vendor: "zyxel", version: "5.17\\(abup.12\\)c0", }, { model: "ex3600-t0", scope: "lt", trust: 1, vendor: "zyxel", version: "5.70\\(acif.0.3\\)c0", }, { model: "pm3100-t0", scope: "lt", trust: 1, vendor: "zyxel", version: "5.42\\(acbf.2.1\\)c0", }, { model: "scr50axe", scope: "lt", trust: 1, vendor: "zyxel", version: "1.10\\(acgn.3\\)c0", }, { model: "ex3300-t1", scope: "lt", trust: 1, vendor: "zyxel", version: "5.50\\(abvy.5.3\\)c0", }, { model: "vmg3625-t50b", scope: null, trust: 0.8, vendor: "zyxel", version: null, }, { model: "wx5600-t0", scope: null, trust: 0.8, vendor: "zyxel", version: null, }, { model: "vmg3927-t50k", scope: null, trust: 0.8, vendor: "zyxel", version: null, }, { model: "wx3100-t0", scope: null, trust: 0.8, vendor: "zyxel", version: null, }, { model: "emg5523-t50b", scope: null, trust: 0.8, vendor: "zyxel", version: null, }, { model: "scr50axe", scope: null, trust: 0.8, vendor: "zyxel", version: null, }, { model: "vmg4005-b50a", scope: null, trust: 0.8, vendor: "zyxel", version: null, }, { model: "ex7501-b0", scope: null, trust: 0.8, vendor: "zyxel", version: null, }, { model: "vmg8623-t50b", scope: null, trust: 0.8, vendor: "zyxel", version: null, }, { model: "vmg4005-b60a", scope: null, trust: 0.8, vendor: "zyxel", version: null, }, { model: "pm7300-t0", scope: null, trust: 0.8, vendor: "zyxel", version: null, }, { model: "px3321-t1", scope: null, trust: 0.8, vendor: "zyxel", version: null, }, { model: "vmg8825-t50k", scope: null, trust: 0.8, vendor: "zyxel", version: null, }, { model: "pm3100-t0", scope: null, trust: 0.8, vendor: "zyxel", version: null, }, { model: "ex7710-b0", scope: null, trust: 0.8, vendor: "zyxel", version: null, }, { model: "ax7501-b1", scope: null, trust: 0.8, vendor: "zyxel", version: null, }, { model: "emg5723-t50k", scope: null, trust: 0.8, vendor: "zyxel", version: null, }, { model: "emg3525-t50b", scope: null, trust: 0.8, vendor: "zyxel", version: null, }, { model: "wx3401-b0", scope: null, trust: 0.8, vendor: "zyxel", version: null, }, { model: "pm5100-t0", scope: null, trust: 0.8, vendor: "zyxel", version: null, }, { model: "vmg8825-t50k <=5.50 c0", scope: null, trust: 0.6, vendor: "zyxel", version: null, }, ], sources: [ { db: "CNVD", id: "CNVD-2024-40286", }, { db: "JVNDB", id: "JVNDB-2024-009433", }, { db: "NVD", id: "CVE-2024-38269", }, ], }, cve: "CVE-2024-38269", cvss: { "@context": { cvssV2: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#", }, "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2", }, cvssV3: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#", }, "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/", }, severity: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/cvss/severity#", }, "@id": "https://www.variotdbs.pl/ref/cvss/severity", }, sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, "@id": "https://www.variotdbs.pl/ref/sources", }, }, data: [ { cvssV2: [ { accessComplexity: "LOW", accessVector: "NETWORK", authentication: "MULTIPLE", author: "CNVD", availabilityImpact: "COMPLETE", baseScore: 6.1, confidentialityImpact: "NONE", exploitabilityScore: 6.4, id: "CNVD-2024-40286", impactScore: 6.9, integrityImpact: "NONE", severity: "MEDIUM", trust: 0.6, vectorString: "AV:N/AC:L/Au:M/C:N/I:N/A:C", version: "2.0", }, ], cvssV3: [ { attackComplexity: "LOW", attackVector: "NETWORK", author: "security@zyxel.com.tw", availabilityImpact: "HIGH", baseScore: 4.9, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", exploitabilityScore: 1.2, id: "CVE-2024-38269", impactScore: 3.6, integrityImpact: "NONE", privilegesRequired: "HIGH", scope: "UNCHANGED", trust: 1, userInteraction: "NONE", vectorString: "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", version: "3.1", }, { attackComplexity: "Low", attackVector: "Network", author: "OTHER", availabilityImpact: "High", baseScore: 4.9, baseSeverity: "Medium", confidentialityImpact: "None", exploitabilityScore: null, id: "JVNDB-2024-009433", impactScore: null, integrityImpact: "None", privilegesRequired: "High", scope: "Unchanged", trust: 0.8, userInteraction: "None", vectorString: "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", version: "3.0", }, ], severity: [ { author: "security@zyxel.com.tw", id: "CVE-2024-38269", trust: 1, value: "MEDIUM", }, { author: "OTHER", id: "JVNDB-2024-009433", trust: 0.8, value: "Medium", }, { author: "CNVD", id: "CNVD-2024-40286", trust: 0.6, value: "MEDIUM", }, ], }, ], sources: [ { db: "CNVD", id: "CNVD-2024-40286", }, { db: "JVNDB", id: "JVNDB-2024-009433", }, { db: "NVD", id: "CVE-2024-38269", }, ], }, description: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/description#", sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, }, }, data: "An improper restriction of operations within the bounds of a memory buffer in the USB file-sharing handler of the Zyxel VMG8825-T50K firmware versions through 5.50(ABOM.8)C0 could allow an authenticated attacker with administrator privileges to cause potential memory corruptions, resulting in a thread crash on an affected device. wx5600-t0 firmware, wx3401-b0 firmware, wx3100-t0 firmware etc. ZyXEL There are unspecified vulnerabilities in the product.Service operation interruption (DoS) It may be in a state. Zyxel VMG8825-T50K is an Internet access device from China's Zyxel Corporation. \n\nZyxel VMG8825-T50K has a buffer overflow vulnerability, which stems from the USB file sharing handler improperly restricting operations within the memory buffer range", sources: [ { db: "NVD", id: "CVE-2024-38269", }, { db: "JVNDB", id: "JVNDB-2024-009433", }, { db: "CNVD", id: "CNVD-2024-40286", }, ], trust: 2.16, }, external_ids: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/external_ids#", data: { "@container": "@list", }, sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, }, }, data: [ { db: "NVD", id: "CVE-2024-38269", trust: 3.2, }, { db: "JVNDB", id: "JVNDB-2024-009433", trust: 0.8, }, { db: "CNVD", id: "CNVD-2024-40286", trust: 0.6, }, ], sources: [ { db: "CNVD", id: "CNVD-2024-40286", }, { db: "JVNDB", id: "JVNDB-2024-009433", }, { db: "NVD", id: "CVE-2024-38269", }, ], }, id: "VAR-202409-1843", iot: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/iot#", sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, }, }, data: true, sources: [ { db: "CNVD", id: "CNVD-2024-40286", }, ], trust: 0.06, }, iot_taxonomy: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#", data: { "@container": "@list", }, sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, }, }, data: [ { category: [ "Network device", ], sub_category: null, trust: 0.6, }, ], sources: [ { db: "CNVD", id: "CNVD-2024-40286", }, ], }, last_update_date: "2024-10-13T23:13:54.758000Z", problemtype_data: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#", sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, }, }, data: [ { problemtype: "CWE-119", trust: 1, }, { problemtype: "NVD-CWE-noinfo", trust: 1, }, { problemtype: "Buffer error (CWE-119) [ others ]", trust: 0.8, }, { problemtype: " Lack of information (CWE-noinfo) [NVD evaluation ]", trust: 0.8, }, ], sources: [ { db: "JVNDB", id: "JVNDB-2024-009433", }, { db: "NVD", id: "CVE-2024-38269", }, ], }, references: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/references#", data: { "@container": "@list", }, sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, }, }, data: [ { trust: 1.8, url: "https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-post-authentication-memory-corruption-vulnerabilities-in-some-dsl-ethernet-cpe-fiber-ont-wifi-extender-and-security-router-versions-09-24-2024", }, { trust: 1.4, url: "https://nvd.nist.gov/vuln/detail/cve-2024-38269", }, ], sources: [ { db: "CNVD", id: "CNVD-2024-40286", }, { db: "JVNDB", id: "JVNDB-2024-009433", }, { db: "NVD", id: "CVE-2024-38269", }, ], }, sources: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", data: { "@container": "@list", }, }, data: [ { db: "CNVD", id: "CNVD-2024-40286", }, { db: "JVNDB", id: "JVNDB-2024-009433", }, { db: "NVD", id: "CVE-2024-38269", }, ], }, sources_release_date: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#", data: { "@container": "@list", }, }, data: [ { date: "2024-10-10T00:00:00", db: "CNVD", id: "CNVD-2024-40286", }, { date: "2024-10-01T00:00:00", db: "JVNDB", id: "JVNDB-2024-009433", }, { date: "2024-09-24T02:15:03.230000", db: "NVD", id: "CVE-2024-38269", }, ], }, sources_update_date: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#", data: { "@container": "@list", }, }, data: [ { date: "2024-10-11T00:00:00", db: "CNVD", id: "CNVD-2024-40286", }, { date: "2024-10-01T00:47:00", db: "JVNDB", id: "JVNDB-2024-009433", }, { date: "2024-09-30T15:51:55.567000", db: "NVD", id: "CVE-2024-38269", }, ], }, title: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/title#", sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, }, }, data: "plural ZyXEL Product vulnerabilities", sources: [ { db: "JVNDB", id: "JVNDB-2024-009433", }, ], trust: 0.8, }, }
Log in or create an account to share your comment.
This schema specifies the format of a comment related to a security advisory.
Sightings
Author | Source | Type | Date |
---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.