CVE-2024-0816

Medium

Description

The buffer overflow vulnerability in the DX3300-T1 firmware version V5.50(ABVY.4)C0 could allow an authenticated local attacker to cause denial of service (DoS) conditions by executing the CLI command with crafted strings on an affected device.

SeverityMedium
CVSS5.5
Exploit probability—
ProductZyxel Dx3300-t1 Firmware
PublishedMay 21, 2024
First seenMay 21, 2024
Weakness typeCWE-120CWE-120

How to fix

Affected products

ProductAffected versionsFixed in
zyxel dx3300-t1_firmware5.50\(aby.4\)c0—
zyxel lte3202-m437_firmware1.00\(abwf.3\)c0—
zyxel lte3301-plus_firmware1.00\(abqu.5\)c0—
zyxel lte5388-m804_firmware1.00\(absq.4\)c0—
zyxel lte5398-m904_firmware1.00\(abq.4\)c0—
zyxel lte7240-m403_firmware2.00\(abmg.7\)c0—
zyxel lte7480-m804_firmware1.00\(abra.8\)c0—
zyxel lte7490-m904_firmware1.00\(abqy.7\)c0—
zyxel nr5103_firmware4.19\(abyc.5\)c0—
zyxel nr5103e_firmware1.00\(acdj.1\)b3—
zyxel nr5103ev2_firmware1.00\(aciq.0\)c0—
zyxel nr5307_firmware1.00\(acjt.0\)b4—
zyxel nr7101_firmware1.00\(abu.9\)c0—
zyxel nr7102_firmware1.00\(abyd.2\)c0—
zyxel nr7103_firmware1.00\(accz.2\)c0—
zyxel nr7302_firmware1.00\(acha.2\)c0—
zyxel nr7303_firmware1.00\(acei.0\)c0—
zyxel nr7501_firmware1.00\(aceh.0\)c0—
zyxel nebula_fwa505_firmware1.18\(acko.1\)c0—
zyxel nebula_fwa510_firmware1.18\(acgd.1\)c0—
zyxel nebula_fwa710_firmware1.17\(acgc.0\)c0—
zyxel nebula_lte3301-plus_firmware1.17\(acca.0\)c0—
zyxel nebula_lte7461-m602_firmware1.15\(ace.3\)c0—
zyxel nebula_nr5101_firmware1.16\(accg.0\)c0—
zyxel nebula_nr7101_firmware1.16\(accc.0\)c0—
zyxel dx3301-t0_firmware5.50\(aby.4\)c0—
zyxel dx4510_firmware5.17\(abyl.6\)c0—
zyxel dx5401-b0_firmware5.17\(abyo.5\)c0—
zyxel dx5401-b1_firmware5.17\(abyo.5\)c0—
zyxel emg3525-t50b_firmware5.50\(abpm.8\)c0—
zyxel emg5523-t50b_firmware5.50\(abpm.8\)c0—
zyxel emg5723-t50k_firmware5.50\(abom.8.2\)c0—
zyxel ex3300-t1_firmware5.50\(aby.4\)c0—
zyxel ex3301-t0_firmware5.50\(aby.4\)c0—
zyxel ex3320-t0_firmware5.71\(yak.2\)d0—
zyxel ex3320-t1_firmware5.71\(yap.0\)c0—
zyxel ex3500-t0_firmware5.44\(achr.0\)c0—
zyxel ex3501-t0_firmware5.44\(achr.0\)c0—
zyxel ex3510_firmware5.17\(abup.11\)c0—
zyxel ex5401-b0_firmware5.17\(abyo.5\)c0—
zyxel ex5401-b1_firmware5.17\(abyo.5\)c0—
zyxel ex5501-b0_firmware5.17\(abry.4\)c0—
zyxel ex5510_firmware5.17\(abqx.9\)c0—
zyxel ex5512-t0_firmware5.70\(aceg.2\)c0—
zyxel ex5600-t1_firmware5.70\(acdz.2\)c0—
zyxel ex5601-t0_firmware5.70\(acdz.2\)c0—
zyxel ex5601-t1_firmware5.70\(acdz.2\)c0—
zyxel ex7710-b0_firmware5.18\(acak.0\)c0—
zyxel vmg3625-t50b_firmware5.50\(abpm.8\)c0—
zyxel vmg3927-t50k_firmware5.50\(abom.8.2\)c0—
zyxel vmg4005-b50a_firmware5.17\(abqa.2\)c0—
zyxel vmg4005-b60a_firmware5.17\(abqa.2\)c0—
zyxel vmg8623-t50b_firmware5.50\(abpm.8\)c0—
zyxel vmg8825-t50k_firmware5.50\(abom.8.2\)c0—
zyxel ax7501-b0_firmware5.17\(abpc.4\)c0—
zyxel ax7501-b1_firmware5.17\(abpc.4\)c0—
zyxel pm3100-t0_firmware5.42\(acbf.1.2\)c0—
zyxel pm5100-t0_firmware5.42\(acbf.1.2\)c0—
zyxel pm7300-t0_firmware5.42\(abyy.1\)c0—
zyxel px3321-t1_firmware5.44\(acjb.0\)c0—
zyxel wx3100-t0_firmware5.50\(abl.3\)c0—
zyxel wx3401-b0_firmware5.17\(abe.2\)c0—
zyxel wx5600-t0_firmware5.70\(acdz.2\)c0—
zyxel wx5610-b0_firmware5.18\(acgj.0\)c0—
zyxel nbg7510_firmware1.00\(abzy.6\)c0—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.