CVE-2024-38266
—CVSS 3.1
4.9 medium
EPSS
<1%p36
Published
()
Modified
Description
An improper restriction of operations within the bounds of a memory buffer in the parameter type parser of the Zyxel VMG8825-T50K firmware versions through 5.50(ABOM.8)C0 could allow an authenticated attacker with administrator privileges to cause potential memory corruptions, resulting in a thread crash on an affected device.
- Vendors
- zyxel
- Products
- dx3300-t0 firmware, dx3300-t1 firmware, dx3301-t0 firmware, dx4510-b0 firmware, dx4510-b1 firmware, dx5401-b0 firmware, dx5401-b1 firmware, ex3300-t0 firmware, ex3300-t1 firmware, ex3301-t0 firmware, ex3500-t0 firmware, ex3501-t0 firmware
- Weakness
- CWE-119, CWE-787
- Vector
- CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
In the news0 stories
No ingested article mentions this CVE yet.