Buffer Overflow Vulnerability Could Lead to Denial of Service Conditions

CVE-2023-37929

6.5MEDIUM

Key Information

Vendor
Zyxel
Status
V5.50(abpm.8)c0 Firmware
Vendor
CVE Published:
21 May 2024

Summary

The buffer overflow vulnerability in the CGI program of the VMG3625-T50B firmware version V5.50(ABPM.8)C0 could allow an authenticated remote attacker to cause denial of service (DoS) conditions by sending a crafted HTTP request to a vulnerable device.

Affected Version(s)

V5.50(ABPM.8)C0 firmware V5.50(ABPM.8)C0

References

https://www.zyxel.com/global/en/support/security-advisori...
vendor-advisory

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

Collectors

NVD DatabaseMitre Database
.