PT-2024-15836 · Dx3300-T1 · Dx3300-T1

Marko Silokunnas · Published 2024-05-21 · Updated 2025-01-22 · CVE-2024-0816

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions DX3300-T1 firmware version V5.50(ABVY.4)C0

Description The issue allows an authenticated local attacker to cause denial of service (DoS) conditions by executing the CLI command with crafted strings on an affected device.

Recommendations For DX3300-T1 firmware version V5.50(ABVY.4)C0, consider restricting access to the CLI command until a patch is available to prevent potential denial of service conditions.

Fix

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

CVE-2024-0816

Affected Products

Dx3300-T1

References · 6

• https://zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-buffer-overflow-vulnerabilities-in-some-5g-nr-4g-lte-cpe-dsl-ethernet-cpe-fiber-ont-wifi-extender-and-home-router-devices-05-21-2024 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-0816 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-0816 · Security Note
• https://t.me/cvenotify/108307 · Telegram Post
• https://t.me/cvenotify/80545 · Telegram Post
• https://t.me/cvenotify/80500 · Telegram Post