Threat Investigation
Request a demo

CVE-2024-8748

High

Description

A buffer overflow vulnerability in the packet parser of the third-party library "libclinkc" in Zyxel VMG8825-T50K firmware versions through V5.50(ABOM.8.4)C0 could allow an attacker to cause a temporary denial of service (DoS) condition against the web management interface by sending a crafted HTTP POST request to a vulnerable device.

SeverityHigh
CVSS7.5
Exploit probability—
ProductZyxel Vmg8825-t50k Firmware
PublishedDec 3, 2024
First seenDec 3, 2024
Weakness typeCWE-120CWE-120

How to fix

Update
  • zyxel vmg8825-t50k_firmware5.50\(abom.8.5\)c0, 5.50\(abpy.1\)b26 or later
  • zyxel lte3301-plus_firmware1.00\(abqu.6\)c0 or later
  • zyxel lte5388-m804_firmware1.00\(absq.5\)c0 or later
  • zyxel lte5398-m904_firmware1.00\(abq.5\)c0 or later
  • zyxel lte7480-m804_firmware1.00\(abra.10\)c0 or later
  • zyxel lte7490-m904_firmware1.00\(abqy.9\)c0 or later
  • zyxel nr7101_firmware1.00\(abu.11\)c0 or later
  • zyxel nr7102_firmware1.00\(abyd.4\)c0 or later
  • zyxel nebula_nr5101_firmware1.16\(accg.1\)c0 or later
  • zyxel nebula_nr7101_firmware1.16\(accc.1\)c0 or later
  • zyxel nebula_lte3301-plus_firmware1.18\(acca.5\)c0 or later
  • zyxel dx3300-t0_firmware5.50\(aby.5.4\)c0 or later
Vendor advisories

Affected products

ProductAffected versionsFixed in
zyxel vmg8825-t50k_firmwarev < 5.50\(abom.8.5\)c0, v < 5.50\(abpy.1\)b265.50\(abom.8.5\)c0, 5.50\(abpy.1\)b26
zyxel lte3301-plus_firmwarev < 1.00\(abqu.6\)c01.00\(abqu.6\)c0
zyxel lte5388-m804_firmwarev < 1.00\(absq.5\)c01.00\(absq.5\)c0
zyxel lte5398-m904_firmwarev < 1.00\(abq.5\)c01.00\(abq.5\)c0
zyxel lte7480-m804_firmwarev < 1.00\(abra.10\)c01.00\(abra.10\)c0
zyxel lte7490-m904_firmwarev < 1.00\(abqy.9\)c01.00\(abqy.9\)c0
zyxel nr7101_firmwarev < 1.00\(abu.11\)c01.00\(abu.11\)c0
zyxel nr7102_firmwarev < 1.00\(abyd.4\)c01.00\(abyd.4\)c0
zyxel nebula_nr5101_firmwarev < 1.16\(accg.1\)c01.16\(accg.1\)c0
zyxel nebula_nr7101_firmwarev < 1.16\(accc.1\)c01.16\(accc.1\)c0
zyxel nebula_lte3301-plus_firmwarev < 1.18\(acca.5\)c01.18\(acca.5\)c0
zyxel dx3300-t0_firmwarev < 5.50\(aby.5.4\)c05.50\(aby.5.4\)c0
zyxel dx3300-t1_firmwarev < 5.50\(aby.5.4\)c05.50\(aby.5.4\)c0
zyxel dx3301-t0_firmwarev < 5.50\(aby.5.4\)c05.50\(aby.5.4\)c0
zyxel dx4510-b0_firmwarev < 5.17\(abyl.8\)c05.17\(abyl.8\)c0
zyxel dx4510-b1_firmwarev < 5.17\(abyl.8\)c05.17\(abyl.8\)c0
zyxel dx5401-b0_firmwarev < 5.17\(abyo.6.4\)c05.17\(abyo.6.4\)c0
zyxel dx5401-b1_firmwarev < 5.17\(abyo.6.4\)c05.17\(abyo.6.4\)c0
zyxel ee6510-10_firmwarev < 5.19\(acjq.1\)c05.19\(acjq.1\)c0
zyxel ex2210-t0_firmwarev < 5.50\(acdi.2\)c05.50\(acdi.2\)c0
zyxel ex3300-t0_firmwarev < 5.50\(aby.5.4\)c05.50\(aby.5.4\)c0
zyxel ex3300-t1_firmwarev < 5.50\(aby.5.4\)c05.50\(aby.5.4\)c0
zyxel ex3301-t0_firmwarev < 5.50\(aby.5.4\)c05.50\(aby.5.4\)c0
zyxel ex3500-t0_firmwarev < 5.44\(achr.3\)c05.44\(achr.3\)c0
zyxel ex3501-t0_firmwarev < 5.44\(achr.3\)c05.44\(achr.3\)c0
zyxel ex3510-b0_firmwarev < 5.17\(abup.13\)c05.17\(abup.13\)c0
zyxel ex3510-b1_firmwarev < 5.17\(abup.13\)c05.17\(abup.13\)c0
zyxel ex3600-t0_firmwarev < 5.70\(acif.0.4\)c05.70\(acif.0.4\)c0
zyxel ex5401-b0_firmwarev < 5.17\(abyo.6.4\)c05.17\(abyo.6.4\)c0
zyxel ex5401-b1_firmwarev < 5.17\(abyo.6.4\)c05.17\(abyo.6.4\)c0
zyxel ex5501-b0_firmwarev < 5.17\(abry.5.3\)c05.17\(abry.5.3\)c0
zyxel ex5510-b0_firmwarev < 5.17\(abqx.11\)c05.17\(abqx.11\)c0
zyxel ex5512-t0_firmwarev < 5.70\(aceg4.2\)c05.70\(aceg4.2\)c0
zyxel ex5600-t1_firmwarev < 5.70\(acdz.3.4\)c05.70\(acdz.3.4\)c0
zyxel ex5601-t0_firmwarev < 5.70\(acdz.3.4\)c05.70\(acdz.3.4\)c0
zyxel ex5601-t1_firmwarev < 5.70\(acdz.3.4\)c05.70\(acdz.3.4\)c0
zyxel ex7501-b0_firmwarev < 5.18\(achn.1.3\)c05.18\(achn.1.3\)c0
zyxel ex7710-b0_firmwarev < 5.18\(acak.1.1\)c05.18\(acak.1.1\)c0
zyxel emg3525-t50b_firmwarev < 5.50\(abpm.9.3\)c05.50\(abpm.9.3\)c0
zyxel emg5523-t50b_firmwarev < 5.50\(abpm.9.3\)c05.50\(abpm.9.3\)c0
zyxel emg5723-t50k_firmwarev < 5.50\(abom.8.5\)c05.50\(abom.8.5\)c0
zyxel emg6726-b10a_firmwarev < 5.13\(abnp.8\)c15.13\(abnp.8\)c1
zyxel vmg3625-t50b_firmwarev < 5.50\(abpm.9.3\)c05.50\(abpm.9.3\)c0
zyxel vmg3927-b50b_firmwarev < 5.13\(ably.9\)c15.13\(ably.9\)c1
zyxel vmg3927-t50k_firmwarev < 5.50\(abom.8.5\)c05.50\(abom.8.5\)c0
zyxel vmg4005-b50a_firmwarev < 5.15\(abqa.2.3\)c05.15\(abqa.2.3\)c0
zyxel vmg4005-b60a_firmwarev < 5.15\(abqa.2.3\)c05.15\(abqa.2.3\)c0
zyxel vmg4005-b50b_firmwarev < 5.13\(abrl.5.2\)c05.13\(abrl.5.2\)c0
zyxel vmg4927-b50a_firmwarev < 5.13\(ably.9\)c15.13\(ably.9\)c1
zyxel vmg8623-t50b_firmwarev < 5.50\(abpm.9.3\)c05.50\(abpm.9.3\)c0
zyxel ax7501-b0_firmwarev < 5.17\(abpc.5.3\)c05.17\(abpc.5.3\)c0
zyxel ax7501-b1_firmwarev < 5.17\(abpc.5.3\)c05.17\(abpc.5.3\)c0
zyxel pm3100-t0_firmwarev < 5.42\(acbf.3\)c05.42\(acbf.3\)c0
zyxel pm5100-t0_firmwarev < 5.42\(acbf.3\)c05.42\(acbf.3\)c0
zyxel pm7300-t0_firmwarev < 5.42\(abyy.2.3\)c05.42\(abyy.2.3\)c0
zyxel pm7500-t0_firmwarev < 5.61\(ackk.0.1\)c05.61\(ackk.0.1\)c0
zyxel px3321-t1_firmwarev < 5.44\(acjb.1.1\)c0, v < 5.44\(achk.0.3\)c05.44\(acjb.1.1\)c0, 5.44\(achk.0.3\)c0
zyxel px5301-t0_firmwarev < 5.44\(ackb.0.1\)c05.44\(ackb.0.1\)c0
zyxel wx3100-t0_firmwarev < 5.50\(abl.4.4\)c05.50\(abl.4.4\)c0
zyxel wx3401-b0_firmwarev < 5.17\(abe.2.6\)c05.17\(abe.2.6\)c0
zyxel wx3401-b1_firmwarev < 5.17\(abe.2.6\)c05.17\(abe.2.6\)c0
zyxel wx5600-t0_firmwarev < 5.70\(aceb.3.3\)c05.70\(aceb.3.3\)c0
zyxel wx5610-b0_firmwarev < 5.18\(acgj0.1\)c05.18\(acgj0.1\)c0

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2024-8748 · Zyxel Vmg8825-t50k Firmware · Dark Radar