Vulnerabilities > Zyxel > Ex3300 T0 Firmware > Medium

DATE CVE VULNERABILITY TITLE RISK
2024-12-03 CVE-2024-9197 Classic Buffer Overflow vulnerability in Zyxel products
A post-authentication buffer overflow vulnerability in the parameter "action" of the CGI program in Zyxel VMG3625-T50B firmware versions through V5.50(ABPM.9.2)C0 could allow an authenticated attacker with administrator privileges to cause a temporary denial of service (DoS) condition against the web management interface by sending a crafted HTTP GET request to a vulnerable device if the function ZyEE is enabled.
network
low complexity
zyxel CWE-120
4.9
2024-09-24 CVE-2024-38266 Out-of-bounds Write vulnerability in Zyxel products
An improper restriction of operations within the bounds of a memory buffer in the parameter type parser of the Zyxel VMG8825-T50K firmware versions through 5.50(ABOM.8)C0 could allow an authenticated attacker with administrator privileges to cause potential memory corruptions, resulting in a thread crash on an affected device.
network
low complexity
zyxel CWE-787
4.9
2024-09-24 CVE-2024-38267 Unspecified vulnerability in Zyxel products
An improper restriction of operations within the bounds of a memory buffer in the IPv6 address parser of the Zyxel VMG8825-T50K firmware versions through 5.50(ABOM.8)C0 could allow an authenticated attacker with administrator privileges to cause potential memory corruptions, resulting in a thread crash on an affected device.
network
low complexity
zyxel
4.9
2024-09-24 CVE-2024-38268 Unspecified vulnerability in Zyxel products
An improper restriction of operations within the bounds of a memory buffer in the MAC address parser of the Zyxel VMG8825-T50K firmware versions through 5.50(ABOM.8)C0 could allow an authenticated attacker with administrator privileges to cause potential memory corruptions, resulting in a thread crash on an affected device.
network
low complexity
zyxel
4.9
2024-09-24 CVE-2024-38269 Unspecified vulnerability in Zyxel products
An improper restriction of operations within the bounds of a memory buffer in the USB file-sharing handler of the Zyxel VMG8825-T50K firmware versions through 5.50(ABOM.8)C0 could allow an authenticated attacker with administrator privileges to cause potential memory corruptions, resulting in a thread crash on an affected device.
network
low complexity
zyxel
4.9