CVE-2024-9197
A post-authentication buffer overflow vulnerability in the parameter "action" of the CGI program in Zyxel VMG3625-T50B firmware versions through V5.50(ABPM.9.2)C0 could allow an authenticated attacker with administrator privileges to cause a temporary denial of service (DoS) condition against the web management interface by sending a crafted HTTP GET request to a vulnerable device if the function ZyEE is enabled.
- Score
- CVSS 3.1 4.9 Medium
- Status
- Analyzed - security@zyxel.com.tw
- Published
- 2024-12-03
- Last modified
- 2024-12-03
- Weaknesses
- CWE-120
Affected products
- Ax7501-b0 Firmware (Zyxel)
- Ax7501-b1 Firmware (Zyxel)
- Dx3300-t0 Firmware (Zyxel)
- Dx3300-t1 Firmware (Zyxel)
- Dx3301-t0 Firmware (Zyxel)
- Dx4510-b0 Firmware (Zyxel)
- Dx4510-b1 Firmware (Zyxel)
- Dx5401-b0 Firmware (Zyxel)
- Dx5401-b1 Firmware (Zyxel)
- Ee6510-10 Firmware (Zyxel)
- Emg3525-t50b Firmware (Zyxel)
- Emg5523-t50b Firmware (Zyxel)
- Emg5723-t50k Firmware (Zyxel)
- Ex3300-t0 Firmware (Zyxel)
- Ex3300-t1 Firmware (Zyxel)
- Ex3301-t0 Firmware (Zyxel)
- Ex3500-t0 Firmware (Zyxel)
- Ex3501-t0 Firmware (Zyxel)
- Ex3510-b0 Firmware (Zyxel)
- Ex3510-b1 Firmware (Zyxel)
- Ex3600-t0 Firmware (Zyxel)
- Ex5401-b0 Firmware (Zyxel)
- Ex5401-b1 Firmware (Zyxel)
- Ex5501-b0 Firmware (Zyxel)
- Ex5510-b0 Firmware (Zyxel)
- Ex5600-t1 Firmware (Zyxel)
- Ex5601-t0 Firmware (Zyxel)
- Ex5601-t1 Firmware (Zyxel)
- Ex7501-b0 Firmware (Zyxel)
- Px3321-t1 Firmware (Zyxel)
- Px5301-t0 Firmware (Zyxel)
- Vmg3625-t50b Firmware (Zyxel)
- Vmg3927-t50k Firmware (Zyxel)
- Vmg8623-t50b Firmware (Zyxel)
- Vmg8825-t50k Firmware (Zyxel)
- Wx5600-t0 Firmware (Zyxel)
References
- https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-buffer-overflow-and-post-authen…
