PT-2024-36053 · Zyxel · Zyxel Vmg8825-T50K

Dawid Kulikowski · Published 2024-09-02 · Updated 2026-02-24 · CVE-2024-5412

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: Zyxel VMG8825-T50K firmware version 5.50(ABOM.8)C0

Description: A buffer overflow vulnerability in the library "libclinkc" could allow an unauthenticated attacker to cause denial of service (DoS) conditions by sending a crafted HTTP request to a vulnerable device.

Recommendations: For Zyxel VMG8825-T50K firmware version 5.50(ABOM.8)C0, consider disabling the "libclinkc" library until a patch is available to prevent exploitation of the buffer overflow vulnerability. Restrict access to the device to minimize the risk of denial of service (DoS) conditions. Avoid using the vulnerable firmware version until an update is released. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

CVE-2024-5412

Affected Products

Zyxel Vmg8825-T50K

References · 9

• https://osv.dev/vulnerability/CVE-2024-5412 · Vendor Advisory
• https://zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-buffer-overflow-vulnerability-in-some-5g-nr-cpe-dsl-ethernet-cpe-fiber-ont-wifi-extender-and-security-router-devices-09-03-2024 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-5412 · Security Note
• https://t.me/latest_high_impact_cve/1093 · Telegram Post
• https://t.me/cvenotify/93024 · Telegram Post
• https://twitter.com/cracbot/status/1832660187758653918 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1830846605076947033 · Twitter Post
• https://t.me/cveNotify/153046 · Telegram Post
• https://t.me/cvedetector/4665 · Telegram Post