7.5

CVE-2024-8748

A buffer overflow vulnerability in the packet parser of the third-party library "libclinkc" in Zyxel VMG8825-T50K firmware versions through V5.50(ABOM.8.4)C0 could allow an attacker to cause a temporary denial of service (DoS) condition against the web management interface by sending a crafted HTTP POST request to a vulnerable device.

Data is provided by the National Vulnerability Database (NVD)
Zyxel ≫ Lte3301-plus Firmware Version < 1.00\(abqu.6\)c0
   Zyxel ≫ Lte3301-plus Version-
Zyxel ≫ Lte5388-m804 Firmware Version < 1.00\(absq.5\)c0
   Zyxel ≫ Lte5388-m804 Version-
Zyxel ≫ Lte5398-m904 Firmware Version < 1.00\(abq.5\)c0
   Zyxel ≫ Lte5398-m904 Version-
Zyxel ≫ Lte7480-m804 Firmware Version < 1.00\(abra.10\)c0
   Zyxel ≫ Lte7480-m804 Version-
Zyxel ≫ Lte7490-m904 Firmware Version < 1.00\(abqy.9\)c0
   Zyxel ≫ Lte7490-m904 Version-
Zyxel ≫ Nr7101 Firmware Version < 1.00\(abu.11\)c0
   Zyxel ≫ Nr7101 Version-
Zyxel ≫ Nr7102 Firmware Version < 1.00\(abyd.4\)c0
   Zyxel ≫ Nr7102 Version-
Zyxel ≫ Nebula Nr5101 Firmware Version < 1.16\(accg.1\)c0
   Zyxel ≫ Nebula Nr5101 Version-
Zyxel ≫ Nebula Nr7101 Firmware Version < 1.16\(accc.1\)c0
   Zyxel ≫ Nebula Nr7101 Version-
Zyxel ≫ Nebula Lte3301-plus Firmware Version < 1.18\(acca.5\)c0
   Zyxel ≫ Nebula Lte3301-plus Version-
Zyxel ≫ Dx3300-t0 Firmware Version < 5.50\(aby.5.4\)c0
   Zyxel ≫ Dx3300-t0 Version-
Zyxel ≫ Dx3300-t1 Firmware Version < 5.50\(aby.5.4\)c0
   Zyxel ≫ Dx3300-t1 Version-
Zyxel ≫ Dx3301-t0 Firmware Version < 5.50\(aby.5.4\)c0
   Zyxel ≫ Dx3301-t0 Version-
Zyxel ≫ Dx4510-b0 Firmware Version < 5.17\(abyl.8\)c0
   Zyxel ≫ Dx4510-b0 Version-
Zyxel ≫ Dx4510-b1 Firmware Version < 5.17\(abyl.8\)c0
   Zyxel ≫ Dx4510-b1 Version-
Zyxel ≫ Dx5401-b0 Firmware Version < 5.17\(abyo.6.4\)c0
   Zyxel ≫ Dx5401-b0 Version-
Zyxel ≫ Dx5401-b1 Firmware Version < 5.17\(abyo.6.4\)c0
   Zyxel ≫ Dx5401-b1 Version-
Zyxel ≫ Ee6510-10 Firmware Version < 5.19\(acjq.1\)c0
   Zyxel ≫ Ee6510-10 Version-
Zyxel ≫ Ex2210-t0 Firmware Version < 5.50\(acdi.2\)c0
   Zyxel ≫ Ex2210-t0 Version-
Zyxel ≫ Ex3300-t0 Firmware Version < 5.50\(aby.5.4\)c0
   Zyxel ≫ Ex3300-t0 Version-
Zyxel ≫ Ex3300-t1 Firmware Version < 5.50\(aby.5.4\)c0
   Zyxel ≫ Ex3300-t1 Version-
Zyxel ≫ Ex3301-t0 Firmware Version < 5.50\(aby.5.4\)c0
   Zyxel ≫ Ex3301-t0 Version-
Zyxel ≫ Ex3500-t0 Firmware Version < 5.44\(achr.3\)c0
   Zyxel ≫ Ex3500-t0 Version-
Zyxel ≫ Ex3501-t0 Firmware Version < 5.44\(achr.3\)c0
   Zyxel ≫ Ex3501-t0 Version-
Zyxel ≫ Ex3510-b0 Firmware Version < 5.17\(abup.13\)c0
   Zyxel ≫ Ex3510-b0 Version-
Zyxel ≫ Ex3510-b1 Firmware Version < 5.17\(abup.13\)c0
   Zyxel ≫ Ex3510-b1 Version-
Zyxel ≫ Ex3600-t0 Firmware Version < 5.70\(acif.0.4\)c0
   Zyxel ≫ Ex3600-t0 Version-
Zyxel ≫ Ex5401-b0 Firmware Version < 5.17\(abyo.6.4\)c0
   Zyxel ≫ Ex5401-b0 Version-
Zyxel ≫ Ex5401-b1 Firmware Version < 5.17\(abyo.6.4\)c0
   Zyxel ≫ Ex5401-b1 Version-
Zyxel ≫ Ex5501-b0 Firmware Version < 5.17\(abry.5.3\)c0
   Zyxel ≫ Ex5501-b0 Version-
Zyxel ≫ Ex5510-b0 Firmware Version < 5.17\(abqx.11\)c0
   Zyxel ≫ Ex5510-b0 Version-
Zyxel ≫ Ex5512-t0 Firmware Version < 5.70\(aceg4.2\)c0
   Zyxel ≫ Ex5512-t0 Version-
Zyxel ≫ Ex5600-t1 Firmware Version < 5.70\(acdz.3.4\)c0
   Zyxel ≫ Ex5600-t1 Version-
Zyxel ≫ Ex5601-t0 Firmware Version < 5.70\(acdz.3.4\)c0
   Zyxel ≫ Ex5601-t0 Version-
Zyxel ≫ Ex5601-t1 Firmware Version < 5.70\(acdz.3.4\)c0
   Zyxel ≫ Ex5601-t1 Version-
Zyxel ≫ Ex7501-b0 Firmware Version < 5.18\(achn.1.3\)c0
   Zyxel ≫ Ex7501-b0 Version-
Zyxel ≫ Ex7710-b0 Firmware Version < 5.18\(acak.1.1\)c0
   Zyxel ≫ Ex7710-b0 Version-
Zyxel ≫ Emg3525-t50b Firmware Version < 5.50\(abpm.9.3\)c0
   Zyxel ≫ Emg3525-t50b Version-
Zyxel ≫ Emg5523-t50b Firmware Version < 5.50\(abpm.9.3\)c0
   Zyxel ≫ Emg5523-t50b Version-
Zyxel ≫ Emg5723-t50k Firmware Version < 5.50\(abom.8.5\)c0
   Zyxel ≫ Emg5723-t50k Version-
Zyxel ≫ Emg6726-b10a Firmware Version < 5.13\(abnp.8\)c1
   Zyxel ≫ Emg6726-b10a Version-
Zyxel ≫ Vmg3625-t50b Firmware Version < 5.50\(abpm.9.3\)c0
   Zyxel ≫ Vmg3625-t50b Version-
Zyxel ≫ Vmg3927-b50b Firmware Version < 5.13\(ably.9\)c1
   Zyxel ≫ Vmg3927-b50b Version-
Zyxel ≫ Vmg3927-t50k Firmware Version < 5.50\(abom.8.5\)c0
   Zyxel ≫ Vmg3927-t50k Version-
Zyxel ≫ Vmg4005-b50a Firmware Version < 5.15\(abqa.2.3\)c0
   Zyxel ≫ Vmg4005-b50a Version-
Zyxel ≫ Vmg4005-b60a Firmware Version < 5.15\(abqa.2.3\)c0
   Zyxel ≫ Vmg4005-b60a Version-
Zyxel ≫ Vmg4005-b50b Firmware Version < 5.13\(abrl.5.2\)c0
   Zyxel ≫ Vmg4005-b50b Version-
Zyxel ≫ Vmg4927-b50a Firmware Version < 5.13\(ably.9\)c1
   Zyxel ≫ Vmg4927-b50a Version-
Zyxel ≫ Vmg8623-t50b Firmware Version < 5.50\(abpm.9.3\)c0
   Zyxel ≫ Vmg8623-t50b Version-
Zyxel ≫ Vmg8825-t50k Firmware Version < 5.50\(abom.8.5\)c0
   Zyxel ≫ Vmg8825-t50k Version-
Zyxel ≫ Vmg8825-t50k Firmware Version < 5.50\(abpy.1\)b26
   Zyxel ≫ Vmg8825-t50k Version-
Zyxel ≫ Ax7501-b0 Firmware Version < 5.17\(abpc.5.3\)c0
   Zyxel ≫ Ax7501-b0 Version-
Zyxel ≫ Ax7501-b1 Firmware Version < 5.17\(abpc.5.3\)c0
   Zyxel ≫ Ax7501-b1 Version-
Zyxel ≫ Pm3100-t0 Firmware Version < 5.42\(acbf.3\)c0
   Zyxel ≫ Pm3100-t0 Version-
Zyxel ≫ Pm5100-t0 Firmware Version < 5.42\(acbf.3\)c0
   Zyxel ≫ Pm5100-t0 Version-
Zyxel ≫ Pm7300-t0 Firmware Version < 5.42\(abyy.2.3\)c0
   Zyxel ≫ Pm7300-t0 Version-
Zyxel ≫ Pm7500-t0 Firmware Version < 5.61\(ackk.0.1\)c0
   Zyxel ≫ Pm7500-t0 Version-
Zyxel ≫ Px3321-t1 Firmware Version < 5.44\(acjb.1.1\)c0
   Zyxel ≫ Px3321-t1 Version-
Zyxel ≫ Px3321-t1 Firmware Version < 5.44\(achk.0.3\)c0
   Zyxel ≫ Px3321-t1 Version-
Zyxel ≫ Px5301-t0 Firmware Version < 5.44\(ackb.0.1\)c0
   Zyxel ≫ Px5301-t0 Version-
Zyxel ≫ Wx3100-t0 Firmware Version < 5.50\(abl.4.4\)c0
   Zyxel ≫ Wx3100-t0 Version-
Zyxel ≫ Wx3401-b0 Firmware Version < 5.17\(abe.2.6\)c0
   Zyxel ≫ Wx3401-b0 Version-
Zyxel ≫ Wx3401-b1 Firmware Version < 5.17\(abe.2.6\)c0
   Zyxel ≫ Wx3401-b1 Version-
Zyxel ≫ Wx5600-t0 Firmware Version < 5.70\(aceb.3.3\)c0
   Zyxel ≫ Wx5600-t0 Version-
Zyxel ≫ Wx5610-b0 Firmware Version < 5.18\(acgj0.1\)c0
   Zyxel ≫ Wx5610-b0 Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.28% 0.507
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
security@zyxel.com.tw 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.