high7.5
CVE-2024-8748
A buffer overflow vulnerability in the packet parser of the third-party library "libclinkc" in Zyxel VMG8825-T50K firmware versions through V5.50(ABOM.8.4)C0 c…
Impact
A buffer overflow vulnerability in the packet parser of the third-party library "libclinkc" in Zyxel VMG8825-T50K firmware versions through V5.50(ABOM.8.4)C0 could allow an attacker to cause a temporary denial of service (DoS) condition against the web management interface by sending a crafted HTTP POST request to a vulnerable device.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zyxel | Lte3301-Plus Firmware | before 1.00\(abqu.6\)c0 |
| Zyxel | Lte5388-M804 Firmware | before 1.00\(absq.5\)c0 |
| Zyxel | Lte5398-M904 Firmware | before 1.00\(abq.5\)c0 |
| Zyxel | Lte7480-M804 Firmware | before 1.00\(abra.10\)c0 |
| Zyxel | Lte7490-M904 Firmware | before 1.00\(abqy.9\)c0 |
| Zyxel | Nr7101 Firmware | before 1.00\(abu.11\)c0 |
| Zyxel | Nr7102 Firmware | before 1.00\(abyd.4\)c0 |
| Zyxel | Nebula Nr5101 Firmware | before 1.16\(accg.1\)c0 |
| Zyxel | Nebula Nr7101 Firmware | before 1.16\(accc.1\)c0 |
| Zyxel | Nebula Lte3301-Plus Firmware | before 1.18\(acca.5\)c0 |
| Zyxel | Dx3300-T0 Firmware | before 5.50\(aby.5.4\)c0 |
| Zyxel | Dx3300-T1 Firmware | before 5.50\(aby.5.4\)c0 |