PT-2024-39481 · Zyxel · Zyxel Vmg3625-T50B

K0Mor3B1 · Published 2024-12-03 · Updated 2025-01-21 · CVE-2024-9197

Positive Technologies (AI Summary)

CVSS v3.1

4.9

Medium

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Zyxel VMG3625-T50B firmware versions through V5.50(ABPM.9.2)C0

Description A post-authentication buffer overflow vulnerability in the action parameter of the CGI program could allow an authenticated attacker with administrator privileges to cause a temporary denial of service (DoS) condition against the web management interface by sending a crafted HTTP GET request to a vulnerable device if the function ZyEE is enabled.

Recommendations For Zyxel VMG3625-T50B firmware versions through V5.50(ABPM.9.2)C0, as a temporary workaround, consider disabling the ZyEE function until a patch is available. Restrict access to the CGI program to minimize the risk of exploitation. Avoid using the action parameter in the affected API endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

CVE-2024-9197

Affected Products

Zyxel Vmg3625-T50B

References · 6

• https://osv.dev/vulnerability/CVE-2024-9197 · Vendor Advisory
• https://zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-buffer-overflow-and-post-authentication-command-injection-vulnerabilities-in-some-4g-lte-5g-nr-cpe-dsl-ethernet-cpe-fiber-onts-and-wifi-extenders-12-03-2024 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-9197 · Security Note
• https://t.me/cvedetector/11847 · Telegram Post
• https://twitter.com/CVEnew/status/1863776213141160047 · Twitter Post
• https://t.me/cvenotify/102866 · Telegram Post