6

CVE-2022-26414

A potential buffer overflow vulnerability was identified in some internal functions of Zyxel VMG3312-T20A firmware version 5.30(ABFX.5)C0, which could be exploited by a local authenticated attacker to cause a denial of service.

Data is provided by the National Vulnerability Database (NVD)
Zyxel ≫ Vmg3312-t20a Firmware Version5.30(abfx.5)c0
   Zyxel ≫ Vmg3312-t20a Version-
Zyxel ≫ Emg3525-t50b Firmware SwEditionamerica Version < 5.50\(abpm.6\)c0
   Zyxel ≫ Emg3525-t50b Version-
Zyxel ≫ Emg3525-t50b Firmware SwEditionemea Version < 5.50\(abpm.6\)c0
   Zyxel ≫ Emg3525-t50b Version-
Zyxel ≫ Emg5523-t50b Firmware SwEditionamerica Version < 5.50\(abpm.6\)c0
   Zyxel ≫ Emg5523-t50b Version-
Zyxel ≫ Emg5523-t50b Firmware SwEditionemea Version < 5.50\(abpm.6\)c0
   Zyxel ≫ Emg5523-t50b Version-
Zyxel ≫ Emg5723-t50k Firmware Version < 5.50\(abom.7\)c0
   Zyxel ≫ Emg5723-t50k Version-
Zyxel ≫ Emg6726-b10a Firmware Version < 5.13\(abnp.7\)c0
   Zyxel ≫ Emg6726-b10a Version-
Zyxel ≫ Vmg1312-t20b Firmware Version < 5.50\(absb.5\)c0
   Zyxel ≫ Vmg1312-t20b Version-
Zyxel ≫ Vmg3625-t50b Firmware Version < 5.50\(abpm.6\)c0
   Zyxel ≫ Vmg3625-t50b Version-
Zyxel ≫ Vmg3927-b50a Firmware Version < 5.17\(abmt.6\)c0
   Zyxel ≫ Vmg3927-b50a Version-
Zyxel ≫ Vmg3927-b50b Firmware Version < 5.13\(ably.7\)c0
   Zyxel ≫ Vmg3927-b50b Version-
Zyxel ≫ Vmg3927-b60a Firmware Version < 5.17\(abmt.6\)c0
   Zyxel ≫ Vmg3927-b60a Version-
Zyxel ≫ Vmg3927-t50k Firmware Version < 5.50\(abom.7\)c0
   Zyxel ≫ Vmg3927-t50k Version-
Zyxel ≫ Vmg4927-b50a Firmware Version < 5.13\(ably.7\)c0
   Zyxel ≫ Vmg4927-b50a Version-
Zyxel ≫ Vmg8623-t50b Firmware Version < 5.50\(abpm.6\)c0
   Zyxel ≫ Vmg8623-t50b Version-
Zyxel ≫ Vmg8825-b50a Firmware Version < 5.17\(abmt.6\)c0
   Zyxel ≫ Vmg8825-b50a Version-
Zyxel ≫ Vmg8825-b50b Firmware Version < 5.17\(abny.7\)c0
   Zyxel ≫ Vmg8825-b50b Version-
Zyxel ≫ Vmg8825-t50k Firmware Version < 5.50\(abom.7\)c0
   Zyxel ≫ Vmg8825-t50k Version-
Zyxel ≫ Vmg8825-b60a Firmware Version < 5.17\(abmt.6\)c0
   Zyxel ≫ Vmg8825-b60a Version-
Zyxel ≫ Vmg8825-b60b Firmware Version < 5.17\(abny.7\)c0
   Zyxel ≫ Vmg8825-b60b Version-
Zyxel ≫ Xmg3927-b50a Firmware Version < 5.17\(abmt.6\)c0
   Zyxel ≫ Xmg3927-b50a Version-
Zyxel ≫ Xmg8825-b50a Firmware Version < 5.17\(abmt.6\)c0
   Zyxel ≫ Xmg8825-b50a Version-
Zyxel ≫ Dx5401-b0 Firmware Version < 5.17\(abyo.1\)c0
   Zyxel ≫ Dx5401-b0 Version-
Zyxel ≫ Ex3510-b0 Firmware Version < 5.17\(abup.4\)c1
   Zyxel ≫ Ex3510-b0 Version-
Zyxel ≫ Ex5401-b0 Firmware Version < 5.17\(abyo.1\)c0
   Zyxel ≫ Ex5401-b0 Version-
Zyxel ≫ Ex5501-b0 Firmware Version < 5.17\(abry.2\)c0
   Zyxel ≫ Ex5501-b0 Version-
Zyxel ≫ Ax7501-b0 Firmware Version < 5.17\(abpc.1\)c0
   Zyxel ≫ Ax7501-b0 Version-
Zyxel ≫ Ep240p Firmware Version < 5.40\(abh.0\)c0
   Zyxel ≫ Ep240p Version-
Zyxel ≫ Pm7300-t0 Firmware Version < 5.42\(acbc.1\)c0
   Zyxel ≫ Pm7300-t0 Version-
Zyxel ≫ Pmg5317-t20b Firmware Version < 5.40\(abki.4\)c0
   Zyxel ≫ Pmg5317-t20b Version-
Zyxel ≫ Pmg5617ga Firmware Version < 5.40\(abna.2\)c0
   Zyxel ≫ Pmg5617ga Version-
Zyxel ≫ Pmg5617-t20b2 Firmware Version < 5.41\(acbb.1\)c0
   Zyxel ≫ Pmg5617-t20b2 Version-
Zyxel ≫ Pmg5622ga Firmware Version < 5.40\(abnb.2\)c0
   Zyxel ≫ Pmg5622ga Version-
Zyxel ≫ Px7501-b0 Firmware Version < 5.17\(abpc.1\)c0
   Zyxel ≫ Px7501-b0 Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.04% 0.101
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
nvd@nist.gov 4.9 3.9 6.9
AV:L/AC:L/Au:N/C:N/I:N/A:C
security@zyxel.com.tw 6 0.8 5.2
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H
CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.