CVEvulnerability
CVE-2024-0816
5.5 MEDIUM
Official page ↗
- Status
- Analyzed
- Published
- 2024-05-21
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- Weaknesses
- CWE-120
Description
The buffer overflow vulnerability in the DX3300-T1 firmware version V5.50(ABVY.4)C0 could allow an authenticated local attacker to cause denial of service (DoS) conditions by executing the CLI command with crafted strings on an affected device.
Affected configurations
• zyxel lte3202-m437 firmware 1.00\(abwf.3\)c0
• zyxel lte3301-plus firmware 1.00\(abqu.5\)c0
• zyxel lte5388-m804 firmware 1.00\(absq.4\)c0
• zyxel lte5398-m904 firmware 1.00\(abq.4\)c0
• zyxel lte7240-m403 firmware 2.00\(abmg.7\)c0
• zyxel lte7480-m804 firmware 1.00\(abra.8\)c0
• zyxel lte7490-m904 firmware 1.00\(abqy.7\)c0
• zyxel nr5103 firmware 4.19\(abyc.5\)c0
• zyxel nr5103e firmware 1.00\(acdj.1\)b3
• zyxel nr5103ev2 firmware 1.00\(aciq.0\)c0
• zyxel nr5307 firmware 1.00\(acjt.0\)b4
• zyxel nr7101 firmware 1.00\(abu.9\)c0
• zyxel nr7102 firmware 1.00\(abyd.2\)c0
• zyxel nr7103 firmware 1.00\(accz.2\)c0
• zyxel nr7302 firmware 1.00\(acha.2\)c0
• zyxel nr7303 firmware 1.00\(acei.0\)c0
• zyxel nr7501 firmware 1.00\(aceh.0\)c0
• zyxel nebula fwa505 firmware 1.18\(acko.1\)c0
• zyxel nebula fwa510 firmware 1.18\(acgd.1\)c0
• zyxel nebula fwa710 firmware 1.17\(acgc.0\)c0
• zyxel nebula lte3301-plus firmware 1.17\(acca.0\)c0
• zyxel nebula lte7461-m602 firmware 1.15\(ace.3\)c0
• zyxel nebula nr5101 firmware 1.16\(accg.0\)c0
• zyxel nebula nr7101 firmware 1.16\(accc.0\)c0
• zyxel dx3300-t1 firmware 5.50\(aby.4\)c0
• zyxel dx3301-t0 firmware 5.50\(aby.4\)c0
• zyxel dx4510 firmware 5.17\(abyl.6\)c0
• zyxel dx5401-b0 firmware 5.17\(abyo.5\)c0
• zyxel dx5401-b1 firmware 5.17\(abyo.5\)c0
• zyxel emg3525-t50b firmware 5.50\(abpm.8\)c0
• zyxel emg5523-t50b firmware 5.50\(abpm.8\)c0
• zyxel emg5723-t50k firmware 5.50\(abom.8.2\)c0
• zyxel ex3300-t1 firmware 5.50\(aby.4\)c0
• zyxel ex3301-t0 firmware 5.50\(aby.4\)c0
• zyxel ex3320-t0 firmware 5.71\(yak.2\)d0
• zyxel ex3320-t1 firmware 5.71\(yap.0\)c0
• zyxel ex3500-t0 firmware 5.44\(achr.0\)c0
• zyxel ex3501-t0 firmware 5.44\(achr.0\)c0
• zyxel ex3510 firmware 5.17\(abup.11\)c0
• zyxel ex5401-b0 firmware 5.17\(abyo.5\)c0
• zyxel ex5401-b1 firmware 5.17\(abyo.5\)c0
• zyxel ex5501-b0 firmware 5.17\(abry.4\)c0
• zyxel ex5510 firmware 5.17\(abqx.9\)c0
• zyxel ex5512-t0 firmware 5.70\(aceg.2\)c0
• zyxel ex5600-t1 firmware 5.70\(acdz.2\)c0
• zyxel ex5601-t0 firmware 5.70\(acdz.2\)c0
• zyxel ex5601-t1 firmware 5.70\(acdz.2\)c0
• zyxel ex7710-b0 firmware 5.18\(acak.0\)c0
• zyxel vmg3625-t50b firmware 5.50\(abpm.8\)c0
• zyxel vmg3927-t50k firmware 5.50\(abom.8.2\)c0
• zyxel vmg4005-b50a firmware 5.17\(abqa.2\)c0
• zyxel vmg4005-b60a firmware 5.17\(abqa.2\)c0
• zyxel vmg8623-t50b firmware 5.50\(abpm.8\)c0
• zyxel vmg8825-t50k firmware 5.50\(abom.8.2\)c0
• zyxel ax7501-b0 firmware 5.17\(abpc.4\)c0
• zyxel ax7501-b1 firmware 5.17\(abpc.4\)c0
• zyxel pm3100-t0 firmware 5.42\(acbf.1.2\)c0
• zyxel pm5100-t0 firmware 5.42\(acbf.1.2\)c0
• zyxel pm7300-t0 firmware 5.42\(abyy.1\)c0
• zyxel px3321-t1 firmware 5.44\(acjb.0\)c0
… and 5 more
Related
Weakness · CWE (1)
- CWE-120 Buffer Copy without Checking Size of Input weakness
References
- https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-buffer-overflow-vulnerabilities-in-some-5g-nr-4g-lte-cpe-dsl-ethernet-cpe-fiber-ont-wifi-extender-and-home-router-devices-05-21-2024 Vendor Advisory
- https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-buffer-overflow-vulnerabilities-in-some-5g-nr-4g-lte-cpe-dsl-ethernet-cpe-fiber-ont-wifi-extender-and-home-router-devices-05-21-2024 Vendor Advisory