CVE-2024-38269
Medium
Description
An improper restriction of operations within the bounds of a memory buffer in the USB file-sharing handler of the Zyxel VMG8825-T50K firmware versions through 5.50(ABOM.8)C0 could allow an authenticated attacker with administrator privileges to cause potential memory corruptions, resulting in a thread crash on an affected device.
SeverityMedium
CVSS4.9
Exploit probability—
Product
Zyxel Vmg8825-t50k Firmware
PublishedSep 24, 2024
First seenSep 24, 2024
Weakness typeCWE-119Memory buffer bounds error
How to fix
Update
- zyxel vmg8825-t50k_firmware5.50\(abom.8.4\)c0 or later
- zyxel wx5600-t0_firmware5.70\(aceb.3.2\)c0 or later
- zyxel wx3401-b0_firmware5.17\(abve.2.5\)c0 or later
- zyxel wx3100-t0_firmware5.50\(abvl.4.3\)c0 or later
- zyxel scr50axe_firmware1.10\(acgn.3\)c0 or later
- zyxel px3321-t1_firmware5.44\(acjb.1\)c0 or later
- zyxel pm7300-t0_firmware5.42\(abyy.2.2\)c0 or later
- zyxel pm5100-t0_firmware5.42\(acbf.2.1\)c0 or later
- zyxel pm3100-t0_firmware5.42\(acbf.2.1\)c0 or later
- zyxel ax7501-b1_firmware5.17\(abpc.5.2\)c0 or later
- zyxel vmg8623-t50b_firmware5.50\(abpm.9.2\)c0 or later
- zyxel vmg4005-b60a_firmware5.17\(abqa.2.2\)c0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| zyxel vmg8825-t50k_firmware | v < 5.50\(abom.8.4\)c0 | 5.50\(abom.8.4\)c0 |
| zyxel wx5600-t0_firmware | v < 5.70\(aceb.3.2\)c0 | 5.70\(aceb.3.2\)c0 |
| zyxel wx3401-b0_firmware | v < 5.17\(abve.2.5\)c0 | 5.17\(abve.2.5\)c0 |
| zyxel wx3100-t0_firmware | v < 5.50\(abvl.4.3\)c0 | 5.50\(abvl.4.3\)c0 |
| zyxel scr50axe_firmware | v < 1.10\(acgn.3\)c0 | 1.10\(acgn.3\)c0 |
| zyxel px3321-t1_firmware | v < 5.44\(acjb.1\)c0 | 5.44\(acjb.1\)c0 |
| zyxel pm7300-t0_firmware | v < 5.42\(abyy.2.2\)c0 | 5.42\(abyy.2.2\)c0 |
| zyxel pm5100-t0_firmware | v < 5.42\(acbf.2.1\)c0 | 5.42\(acbf.2.1\)c0 |
| zyxel pm3100-t0_firmware | v < 5.42\(acbf.2.1\)c0 | 5.42\(acbf.2.1\)c0 |
| zyxel ax7501-b1_firmware | v < 5.17\(abpc.5.2\)c0 | 5.17\(abpc.5.2\)c0 |
| zyxel vmg8623-t50b_firmware | v < 5.50\(abpm.9.2\)c0 | 5.50\(abpm.9.2\)c0 |
| zyxel vmg4005-b60a_firmware | v < 5.17\(abqa.2.2\)c0 | 5.17\(abqa.2.2\)c0 |
| zyxel vmg4005-b50a_firmware | v < 5.17\(abqa.2.2\)c0 | 5.17\(abqa.2.2\)c0 |
| zyxel vmg3927-t50k_firmware | v < 5.50\(abom.8.4\)c0 | 5.50\(abom.8.4\)c0 |
| zyxel vmg3625-t50b_firmware | v < 5.50\(abpm.9.2\)c0 | 5.50\(abpm.9.2\)c0 |
| zyxel emg5723-t50k_firmware | v < 5.50\(abom.8.4\)c0 | 5.50\(abom.8.4\)c0 |
| zyxel emg5523-t50b_firmware | v < 5.50\(abpm.9.2\)c0 | 5.50\(abpm.9.2\)c0 |
| zyxel emg3525-t50b_firmware | v < 5.50\(abpm.9.2\)c0 | 5.50\(abpm.9.2\)c0 |
| zyxel ex7710-b0_firmware | v < 5.18\(acak.1\)c1 | 5.18\(acak.1\)c1 |
| zyxel ex7501-b0_firmware | v < 5.18\(achn.1.2\)c0 | 5.18\(achn.1.2\)c0 |
| zyxel ex5601-t1_firmware | v < 5.70\(acdz.3.2\)c0 | 5.70\(acdz.3.2\)c0 |
| zyxel ex5601-t0_firmware | v < 5.70\(acdz.3.2\)c0 | 5.70\(acdz.3.2\)c0 |
| zyxel ex5512-t0_firmware | v < 5.70\(aceg.3\)c2 | 5.70\(aceg.3\)c2 |
| zyxel ex5510-b0_firmware | v < 5.17\(abqx.10\)c0 | 5.17\(abqx.10\)c0 |
| zyxel ex5401-b1_firmware | v < 5.17\(abyo.6.2\)c0 | 5.17\(abyo.6.2\)c0 |
| zyxel ex5401-b0_firmware | v < 5.17\(abyo.6.2\)c0 | 5.17\(abyo.6.2\)c0 |
| zyxel ex3600-t0_firmware | v < 5.70\(acif.0.3\)c0 | 5.70\(acif.0.3\)c0 |
| zyxel ex3510-b1_firmware | v < 5.17\(abup.12\)c0 | 5.17\(abup.12\)c0 |
| zyxel ex3510-b0_firmware | v < 5.17\(abup.12\)c0 | 5.17\(abup.12\)c0 |
| zyxel ex3501-t0_firmware | v < 5.44\(achr.2\)c0 | 5.44\(achr.2\)c0 |
| zyxel ex3500-t0_firmware | v < 5.44\(achr.2\)c0 | 5.44\(achr.2\)c0 |
| zyxel ex3301-t0_firmware | v < 5.50\(abvy.5.3\)c0 | 5.50\(abvy.5.3\)c0 |
| zyxel ex3300-t1_firmware | v < 5.50\(abvy.5.3\)c0 | 5.50\(abvy.5.3\)c0 |
| zyxel ex3300-t0_firmware | v < 5.50\(abvy.5.3\)c0 | 5.50\(abvy.5.3\)c0 |
| zyxel dx5401-b1_firmware | v < 5.17\(abyo.6.2\)c0 | 5.17\(abyo.6.2\)c0 |
| zyxel dx5401-b0_firmware | v < 5.17\(abyo.6.2\)c0 | 5.17\(abyo.6.2\)c0 |
| zyxel dx4510-b1_firmware | v < 5.17\(abyl.7\)c0 | 5.17\(abyl.7\)c0 |
| zyxel dx4510-b0_firmware | v < 5.17\(abyl.7\)c0 | 5.17\(abyl.7\)c0 |
| zyxel dx3301-t0_firmware | v < 5.50\(abvy.5.3\)c0 | 5.50\(abvy.5.3\)c0 |
| zyxel dx3300-t1_firmware | v < 5.50\(abvy.5.3\)c0 | 5.50\(abvy.5.3\)c0 |
| zyxel dx3300-t0_firmware | v < 5.50\(abvy.5.3\)c0 | 5.50\(abvy.5.3\)c0 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.