CVE-2024-5412
High
Description
A buffer overflow vulnerability in the library "libclinkc" of the Zyxel VMG8825-T50K firmware version 5.50(ABOM.8)C0 could allow an unauthenticated attacker to cause denial of service (DoS) conditions by sending a crafted HTTP request to a vulnerable device.
SeverityHigh
CVSS7.5
Exploit probability—
Product
Zyxel Vmg8825-t50k Firmware
PublishedSep 3, 2024
First seenSep 3, 2024
Weakness typeCWE-120CWE-120
How to fix
Update
- zyxel vmg8825-t50k_firmware5.50\(abom.8.4\)c0 or later
- zyxel nebula_lte3301-plus_firmware1.18\(acca.4\)c0 or later
- zyxel nebula_fwa505_firmware1.18\(acko.4\)c0 or later
- zyxel nebula_fwa710_firmware1.18\(acgc.4\)c0 or later
- zyxel nebula_fwa510_firmware1.18\(acgd.4\)c0 or later
- zyxel wx5600-t0_firmware5.70\(aceb.3.2\)c0 or later
- zyxel wx3401-b0_firmware5.17\(abve.2.5\)c0 or later
- zyxel wx3100-t0_firmware5.50\(abvl.4.2\)c0 or later
- zyxel scr50axe_firmware1.10\(acgn.3\)c0 or later
- zyxel px3321-t1_firmware5.44\(acjb.0.2\)z0 or later
- zyxel pm7300-t0_firmware5.42\(abyy.2.2\)c0 or later
- zyxel pm5100-t0_firmware5.42\(acbf.2.1\)c0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| zyxel vmg8825-t50k_firmware | v < 5.50\(abom.8.4\)c0 | 5.50\(abom.8.4\)c0 |
| zyxel nebula_lte3301-plus_firmware | v < 1.18\(acca.4\)c0 | 1.18\(acca.4\)c0 |
| zyxel nebula_fwa505_firmware | v < 1.18\(acko.4\)c0 | 1.18\(acko.4\)c0 |
| zyxel nebula_fwa710_firmware | v < 1.18\(acgc.4\)c0 | 1.18\(acgc.4\)c0 |
| zyxel nebula_fwa510_firmware | v < 1.18\(acgd.4\)c0 | 1.18\(acgd.4\)c0 |
| zyxel wx5600-t0_firmware | v < 5.70\(aceb.3.2\)c0 | 5.70\(aceb.3.2\)c0 |
| zyxel wx3401-b0_firmware | v < 5.17\(abve.2.5\)c0 | 5.17\(abve.2.5\)c0 |
| zyxel wx3100-t0_firmware | v < 5.50\(abvl.4.2\)c0 | 5.50\(abvl.4.2\)c0 |
| zyxel scr50axe_firmware | v < 1.10\(acgn.3\)c0 | 1.10\(acgn.3\)c0 |
| zyxel px3321-t1_firmware | v < 5.44\(acjb.0.2\)z0 | 5.44\(acjb.0.2\)z0 |
| zyxel pm7300-t0_firmware | v < 5.42\(abyy.2.2\)c0 | 5.42\(abyy.2.2\)c0 |
| zyxel pm5100-t0_firmware | v < 5.42\(acbf.2.1\)c0 | 5.42\(acbf.2.1\)c0 |
| zyxel pm3100-t0_firmware | v < 5.42\(acbf.2.1\)c0 | 5.42\(acbf.2.1\)c0 |
| zyxel ax7501-b1_firmware | v < 5.17\(abpc.5.2\)c0 | 5.17\(abpc.5.2\)c0 |
| zyxel ax7501-b0_firmware | v < 5.17\(abpc.5.2\)c0 | 5.17\(abpc.5.2\)c0 |
| zyxel vmg8623-t50b_firmware | v < 5.50\(abpm.9.2\)c0 | 5.50\(abpm.9.2\)c0 |
| zyxel vmg4005-b60a_firmware | v < 5.15\(abqa.2.2\)c0 | 5.15\(abqa.2.2\)c0 |
| zyxel vmg4005-b50a_firmware | v < 5.15\(abqa.2.2\)c0 | 5.15\(abqa.2.2\)c0 |
| zyxel vmg3927-t50k_firmware | v < 5.50\(abom.8.4\)c0 | 5.50\(abom.8.4\)c0 |
| zyxel vmg3625-t50b_firmware | v < 5.50\(abpm.9.2\)c0 | 5.50\(abpm.9.2\)c0 |
| zyxel emg5723-t50k_firmware | v < 5.50\(abom.8.4\)c0 | 5.50\(abom.8.4\)c0 |
| zyxel emg5523-t50b_firmware | v < 5.50\(abpm.9.2\)c0 | 5.50\(abpm.9.2\)c0 |
| zyxel emg3525-t50b_firmware | v < 5.50\(abpm.9.2\)c0 | 5.50\(abpm.9.2\)c0 |
| zyxel ex7710-b0_firmware | v < 5.18\(acak.1\)c1 | 5.18\(acak.1\)c1 |
| zyxel ex7501-b0_firmware | v < 5.18\(achn.1.2\)c0 | 5.18\(achn.1.2\)c0 |
| zyxel ex5601-t1_firmware | v < 5.70\(acdz.3.2\)c0 | 5.70\(acdz.3.2\)c0 |
| zyxel ex5601-t0_firmware | v < 5.70\(acdz.3.2\)c0 | 5.70\(acdz.3.2\)c0 |
| zyxel ex5512-t0_firmware | v < 5.70\(aceg.3\)c2 | 5.70\(aceg.3\)c2 |
| zyxel ex5510-b0_firmware | v < 5.17\(abqx.10\)b2 | 5.17\(abqx.10\)b2 |
| zyxel ex5401-b1_firmware | v < 5.17\(abyo.6.2\)c0 | 5.17\(abyo.6.2\)c0 |
| zyxel ex5401-b0_firmware | v < 5.17\(abyo.6.2\)c0 | 5.17\(abyo.6.2\)c0 |
| zyxel ex3510-b0_firmware | v < 5.17\(abup.12\)b2 | 5.17\(abup.12\)b2 |
| zyxel ex3501-t0_firmware | v < 5.44\(achr.2\)c0 | 5.44\(achr.2\)c0 |
| zyxel ex3500-t0_firmware | v < 5.44\(achr.2\)c0 | 5.44\(achr.2\)c0 |
| zyxel ex3301-t0_firmware | v < 5.50\(abvy.5.3\)c0 | 5.50\(abvy.5.3\)c0 |
| zyxel ex3300-t1_firmware | v < 5.50\(abvy.5.3\)c0 | 5.50\(abvy.5.3\)c0 |
| zyxel ex3300-t0_firmware | v < 5.50\(abvy.5.3\)c0 | 5.50\(abvy.5.3\)c0 |
| zyxel dx5401-b1_firmware | v < 5.17\(abyo.6.2\)c0 | 5.17\(abyo.6.2\)c0 |
| zyxel dx5401-b0_firmware | v < 5.17\(abyo.6.2\)c0 | 5.17\(abyo.6.2\)c0 |
| zyxel dx4510-b0_firmware | v < 5.17\(abyl.7\)b2 | 5.17\(abyl.7\)b2 |
| zyxel dx3301-t0_firmware | v < 5.50\(abvy.5.3\)c0 | 5.50\(abvy.5.3\)c0 |
| zyxel dx3300-t1_firmware | v < 5.50\(abvy.5.3\)c0 | 5.50\(abvy.5.3\)c0 |
| zyxel dx3300-t0_firmware | v < 5.50\(abvy.5.3\)c0 | 5.50\(abvy.5.3\)c0 |
| zyxel nr7501_firmware | v < 1.00\(aceh.1\)c0 | 1.00\(aceh.1\)c0 |
| zyxel nr7303_firmware | v < 1.00\(acei.1\)b4 | 1.00\(acei.1\)b4 |
| zyxel nr7302_firmware | v < 1.00\(acha.4\)c0 | 1.00\(acha.4\)c0 |
| zyxel nr7103_firmware | v < 1.00\(accz.4\)c0 | 1.00\(accz.4\)c0 |
| zyxel nr5307_firmware | v < 1.00\(acjt.0\)b6 | 1.00\(acjt.0\)b6 |
| zyxel nr5103ev2_firmware | v < 1.00\(aciq.1\)c0 | 1.00\(aciq.1\)c0 |
| zyxel nr5103_firmware | v < 4.19\(abyc.6\)c0 | 4.19\(abyc.6\)c0 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.