medium6.5
CVE-2023-37929
The buffer overflow vulnerability in the CGI program of the VMG3625-T50B firmware version V5.50(ABPM.8)C0 could allow an authenticated remote attacker to cause…
Impact
The buffer overflow vulnerability in the CGI program of the VMG3625-T50B firmware version V5.50(ABPM.8)C0 could allow an authenticated remote attacker to cause denial of service (DoS) conditions by sending a crafted HTTP request to a vulnerable device.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zyxel | Dx3300-T1 Firmware | Version 5.50\(aby.4\)c0 |
| Zyxel | Dx3301-T0 Firmware | Version 5.50\(aby.4\)c0 |
| Zyxel | Dx4510 Firmware | Version 5.17\(abyl.5\)c0 |
| Zyxel | Dx5401-B0 Firmware | Version 5.17\(abyo.5\)c0 |
| Zyxel | Dx5401-B1 Firmware | Version 5.17\(abyo.5\)c0 |
| Zyxel | Emg3525-T50b Firmware | Version 5.50\(abpm.8\)c0 |
| Zyxel | Emg5523-T50b Firmware | Version 5.50\(abpm.8\)c0 |
| Zyxel | Emg5723-T50k Firmware | Version 5.50\(abom.8.2\)c0 |
| Zyxel | Ex3300-T1 Firmware | Version 5.50\(aby.4\)c0 |
| Zyxel | Ex3301-T0 Firmware | Version 5.50\(aby.4\)c0 |
| Zyxel | Ex3500-T0 Firmware | Version 5.44\(achr.0\)c0 |
| Zyxel | Ex3501-T0 Firmware | Version 5.44\(achr.0\)c0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-buffer-overflow-vulnerabilities-in-some-5g-nr-4g-lte-cpe-dsl-ethernet-cpe-fiber-ont-wifi-extender-and-home-router-devices-05-21-2024
- https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-buffer-overflow-vulnerabilities-in-some-5g-nr-4g-lte-cpe-dsl-ethernet-cpe-fiber-ont-wifi-extender-and-home-router-devices-05-21-2024