CVE-2023-37929
Medium
Description
The buffer overflow vulnerability in the CGI program of the VMG3625-T50B firmware version V5.50(ABPM.8)C0 could allow an authenticated remote attacker to cause denial of service (DoS) conditions by sending a crafted HTTP request to a vulnerable device.
SeverityMedium
CVSS6.5
Exploit probability—
Product
Zyxel Vmg3625-t50b Firmware
PublishedMay 21, 2024
First seenMay 21, 2024
Weakness typeCWE-120CWE-120
How to fix
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| zyxel vmg3625-t50b_firmware | 5.50\(abpm.8\)c0 | — |
| zyxel dx3300-t1_firmware | 5.50\(aby.4\)c0 | — |
| zyxel dx3301-t0_firmware | 5.50\(aby.4\)c0 | — |
| zyxel dx4510_firmware | 5.17\(abyl.5\)c0 | — |
| zyxel dx5401-b0_firmware | 5.17\(abyo.5\)c0 | — |
| zyxel dx5401-b1_firmware | 5.17\(abyo.5\)c0 | — |
| zyxel emg3525-t50b_firmware | 5.50\(abpm.8\)c0 | — |
| zyxel emg5523-t50b_firmware | 5.50\(abpm.8\)c0 | — |
| zyxel emg5723-t50k_firmware | 5.50\(abom.8.2\)c0 | — |
| zyxel ex3300-t1_firmware | 5.50\(aby.4\)c0 | — |
| zyxel ex3301-t0_firmware | 5.50\(aby.4\)c0 | — |
| zyxel ex3500-t0_firmware | 5.44\(achr.0\)c0 | — |
| zyxel ex3501-t0_firmware | 5.44\(achr.0\)c0 | — |
| zyxel ex3510_firmware | 5.17\(abup.9\)c0 | — |
| zyxel ex5401-b0_firmware | 5.17\(abyo.5\)c0 | — |
| zyxel ex5401-b1_firmware | 5.17\(abyo.5\)c0 | — |
| zyxel ex5501-b0_firmware | 5.17\(abry.4\)c0 | — |
| zyxel ex5510_firmware | 5.17\(abqx.8\)c0 | — |
| zyxel ex5512-t0_firmware | 5.70\(aceg.2\)c0 | — |
| zyxel ex5600-t1_firmware | 5.70\(acdz.2\)c0 | — |
| zyxel ex5601-t0_firmware | 5.70\(acdz.2\)c0 | — |
| zyxel ex5601-t1_firmware | 5.70\(acdz.2\)c0 | — |
| zyxel ex7710-b0_firmware | 5.18\(acak.0\)c0 | — |
| zyxel vmg3927-t50k_firmware | 5.50\(abom.8.2\)c0 | — |
| zyxel vmg8623-t50b_firmware | 5.50\(abpm.8\)c0 | — |
| zyxel vmg8825-t50k_firmware | 5.50\(abom.8.2\)c0 | — |
| zyxel ax7501-b0_firmware | 5.17\(abpc.4\)c0 | — |
| zyxel ax7501-b1_firmware | 5.17\(abpc.4\)c0 | — |
| zyxel wx3100-t0_firmware | 5.50\(abl.3\)c0 | — |
| zyxel wx5600-t0_firmware | 5.70\(aceb.2\)c0 | — |
| zyxel wx5610-b0_firmware | 5.18\(acgj.0\)c0 | — |
| zyxel nbg7510_firmware | 1.00\(abzy.5\)c0 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.