K0Mor3B1

**Name of the Vulnerable Software and Affected Versions** Zyxel VMG3625-T50B firmware versions through V5.50(ABPM.9.2)C0 **Description** A post-authentication buffer overflow vulnerability in the `action` parameter of the CGI program could allow an authenticated attacker with administrator privileges to cause a temporary denial of service (DoS) condition against the web management interface by sending a crafted HTTP GET request to a vulnerable device if the function ZyEE is enabled. **Recommendations** For Zyxel VMG3625-T50B firmware versions through V5.50(ABPM.9.2)C0, as a temporary workaround, consider disabling the ZyEE function until a patch is available. Restrict access to the CGI program to minimize the risk of exploitation. Avoid using the `action` parameter in the affected API endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Cisco Small Business RV042, RV042G, RV320, and RV325 Routers (affected versions not specified) **Description** The issue is related to improper validation of user input in incoming HTTP packets, which could allow a remote attacker to cause an unexpected reload of the device, resulting in a denial of service (DoS) condition. The attacker would need to have valid Administrator credentials on the affected device to exploit this vulnerability. This can be achieved by sending a crafted HTTP request to the web-based management interface of the affected device. **Recommendations** To resolve the issue, update the firmware of the Cisco Small Business RV042, RV042G, RV320, and RV325 Routers to a version that includes the fix for this vulnerability. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Cisco Small Business RV042, RV042G, RV320, and RV325 Routers (affected versions not specified) **Description** A vulnerability in the web-based management interface could allow an authenticated, Administrator-level, remote attacker to execute arbitrary code as the root user. This is due to improper validation of user-supplied input in the web-based management interface. An attacker could exploit this by sending crafted HTTP requests to an affected device, potentially allowing the execution of arbitrary code on the underlying operating system as the root user. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Cisco Small Business RV042, RV042G, RV320, and RV325 Routers (affected versions not specified) **Description** The issue is related to a buffer overflow in the memory due to insufficient input validation when processing HTTP packets in the web-based management interface of the affected routers. This could allow a remote attacker to execute arbitrary code or cause a denial of service by sending a specially crafted HTTP request. The vulnerability is due to improper validation of user-supplied input in the web-based management interface. An attacker could exploit this vulnerability by sending crafted HTTP requests to an affected device, potentially allowing them to execute arbitrary code on the underlying operating system as the root user, but only if they have valid Administrator credentials on the affected device. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Cisco Small Business RV042, RV042G, RV320, and RV325 Routers (affected versions not specified) **Description** A vulnerability in the web-based management interface could allow an authenticated, Administrator-level, remote attacker to execute arbitrary code as the root user. This is due to improper validation of user-supplied input in the web-based management interface. An attacker could exploit this by sending crafted HTTP requests to an affected device, potentially allowing the execution of arbitrary code on the underlying operating system as the root user. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Cisco Small Business RV042, RV042G, RV320, and RV325 Routers (affected versions not specified) **Description** A vulnerability in the web-based management interface could allow an authenticated, Administrator-level, remote attacker to cause an unexpected reload of an affected device, resulting in a denial of service (DoS) condition. This is due to improper validation of user input in incoming HTTP packets. An attacker could exploit this by sending a crafted HTTP request to the web-based management interface. A successful exploit could allow the attacker to cause an unexpected reload of the device, resulting in a DoS condition. The vulnerability may also allow a remote attacker to execute arbitrary code by sending specially crafted HTTP requests. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Cisco Small Business RV042, RV042G, RV320, and RV325 Routers (affected versions not specified) **Description** A vulnerability in the web-based management interface could allow an authenticated, Administrator-level, remote attacker to cause an unexpected reload of an affected device, resulting in a denial of service (DoS) condition. This is due to improper validation of user input in incoming HTTP packets. An attacker could exploit this by sending a crafted HTTP request to the web-based management interface. A successful exploit could allow the attacker to cause an unexpected reload of the device, resulting in a DoS condition. The vulnerability may also be related to a buffer overflow in memory due to insufficient input validation when processing HTTP packets, potentially allowing a remote attacker to execute arbitrary code or cause a denial of service by sending a specially crafted HTTP request. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Cisco Small Business RV042, RV042G, RV320, and RV325 Routers (affected versions not specified) **Description** The issue is related to insufficient validation of user input in incoming HTTP packets, which can lead to a buffer overflow in memory. This can be exploited by sending a specially crafted HTTP request to the web-based management interface, potentially allowing a remote attacker to execute arbitrary code or cause a denial of service (DoS) condition. The exploitation requires valid Administrator credentials on the affected device. **Recommendations** For Cisco Small Business RV042, RV042G, RV320, and RV325 Routers, consider restricting access to the web-based management interface until a fix is available. As a temporary workaround, limit the use of the web-based management interface to minimize the risk of exploitation. Avoid using the web-based management interface with Administrator credentials until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Cisco Small Business RV042, RV042G, RV320, and RV325 Routers (affected versions not specified) **Description** A vulnerability in the web-based management interface could allow an authenticated, Administrator-level, remote attacker to cause an unexpected reload of an affected device, resulting in a denial of service (DoS) condition. This is due to improper validation of user input in incoming HTTP packets. An attacker could exploit this by sending a crafted HTTP request to the web-based management interface. A successful exploit could allow the attacker to cause an unexpected reload of the device, resulting in a DoS condition. The vulnerability may also allow an attacker to execute arbitrary code. **Recommendations** For Cisco Small Business RV042, RV042G, RV320, and RV325 Routers, consider disabling access to the web-based management interface until a patch is available. Restrict access to the management interface to minimize the risk of exploitation. Avoid using the web-based management interface for critical operations until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Cisco Small Business RV042, RV042G, RV320, and RV325 Routers (affected versions not specified) **Description** The issue is related to a buffer overflow in the memory due to insufficient input validation when processing HTTP packets. This could allow a remote attacker to execute arbitrary code or cause a denial of service by sending a specially crafted HTTP request. The vulnerability is due to improper validation of user-supplied input in the web-based management interface. An attacker would need to have valid Administrator credentials on the affected device to exploit this vulnerability. **Recommendations** For all affected versions, to resolve the issue, ensure that only authorized access to the web-based management interface is allowed and consider restricting access to the interface until a fix is available. As a temporary workaround, consider disabling remote access to the management interface until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.