CVE-2024-5412

HIGH

Zyxel Nebula Lte3301-plus Firmware - Buffer Overflow

Title source: rule
STIX 2.1

Description

A buffer overflow vulnerability in the library "libclinkc" of the Zyxel VMG8825-T50K firmware version 5.50(ABOM.8)C0 could allow an unauthenticated attacker to cause denial of service (DoS) conditions by sending a crafted HTTP request to a vulnerable device.

Scores

CVSS v3 7.5
EPSS 0.0080
EPSS Percentile 74.2%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact partial

Details

CWE
CWE-120
Status published
Products (50)
zyxel/ax7501-b0_firmware < 5.17\(abpc.5.2\)c0
zyxel/ax7501-b1_firmware < 5.17\(abpc.5.2\)c0
zyxel/dx3300-t0_firmware < 5.50\(abvy.5.3\)c0
zyxel/dx3300-t1_firmware < 5.50\(abvy.5.3\)c0
zyxel/dx3301-t0_firmware < 5.50\(abvy.5.3\)c0
zyxel/dx4510-b0_firmware < 5.17\(abyl.7\)b2
zyxel/dx5401-b0_firmware < 5.17\(abyo.6.2\)c0
zyxel/dx5401-b1_firmware < 5.17\(abyo.6.2\)c0
zyxel/emg3525-t50b_firmware < 5.50\(abpm.9.2\)c0
zyxel/emg5523-t50b_firmware < 5.50\(abpm.9.2\)c0
... and 40 more
Published Sep 03, 2024
Tracked Since Feb 18, 2026