CVE-2022-26414: Buffer Overflow
Published Apr 11, 2022
·Updated
A potential buffer overflow vulnerability was identified in some internal functions of Zyxel VMG3312-T20A firmware version 5.30(ABFX.5)C0, which could be exploited by a local authenticated attacker to cause a denial of service.
Affected Software
66 affected components
Zyxel VMG3312-T20A firmware=5.30\(abfx.5\)c0
Zyxel VMG3312-T20A
Zyxel Emg3525-t50b Firmware<5.50\(abpm.6\)c0
Zyxel Emg3525-t50b Firmware<5.50\(abpm.6\)c0
Zyxel Emg3525-t50b
Zyxel Emg5523-t50b Firmware<5.50\(abpm.6\)c0
Zyxel Emg5523-t50b Firmware<5.50\(abpm.6\)c0
Zyxel Emg5523-t50b
Zyxel Emg5723-t50k Firmware<5.50\(abom.7\)c0
Zyxel Emg5723-t50k
Zyxel Emg6726-b10a Firmware<5.13\(abnp.7\)c0
Zyxel Emg6726-b10a
Zyxel Vmg1312-t20b Firmware<5.50\(absb.5\)c0
Zyxel Vmg1312-t20b
Zyxel VMG3625-T50B firmware<5.50\(abpm.6\)c0
Zyxel VMG3625-T50B
Zyxel Vmg3927-b50a Firmware<5.17\(abmt.6\)c0
Zyxel Vmg3927-b50a
Zyxel Vmg3927-b50b Firmware<5.13\(ably.7\)c0
Zyxel Vmg3927-b50b
Zyxel Vmg3927-b60a Firmware<5.17\(abmt.6\)c0
Zyxel Vmg3927-b60a
Zyxel Vmg3927-t50k Firmware<5.50\(abom.7\)c0
Zyxel Vmg3927-t50k
Zyxel Vmg4927-b50a Firmware<5.13\(ably.7\)c0
Zyxel Vmg4927-b50a
Zyxel Vmg8623-t50b Firmware<5.50\(abpm.6\)c0
Zyxel Vmg8623-t50b
Zyxel Vmg8825-b50a Firmware<5.17\(abmt.6\)c0
Zyxel Vmg8825-b50a
Zyxel Vmg8825-b50b Firmware<5.17\(abny.7\)c0
Zyxel Vmg8825-b50b
Zyxel VMG8825-T50K firmware<5.50\(abom.7\)c0
Zyxel VMG8825-T50K
Zyxel Vmg8825-b60a Firmware<5.17\(abmt.6\)c0
Zyxel Vmg8825-b60a
Zyxel Vmg8825-b60b Firmware<5.17\(abny.7\)c0
Zyxel Vmg8825-b60b
Zyxel Xmg3927-b50a Firmware<5.17\(abmt.6\)c0
Zyxel Xmg3927-b50a
Zyxel Xmg8825-b50a Firmware<5.17\(abmt.6\)c0
Zyxel Xmg8825-b50a
Zyxel DX5401-B0 firmware<5.17\(abyo.1\)c0
Zyxel DX5401-B0
Zyxel EX3510-B0 firmware<5.17\(abup.4\)c1
Zyxel EX3510-B0
Zyxel Ex5401-b0 Firmware<5.17\(abyo.1\)c0
Zyxel Ex5401-b0
Zyxel Ex5501-b0 Firmware<5.17\(abry.2\)c0
Zyxel Ex5501-b0
Zyxel AX7501-B0 firmware<5.17\(abpc.1\)c0
Zyxel AX7501-B0
Zyxel Ep240p Firmware<5.40\(abh.0\)c0
Zyxel Ep240p
Zyxel Pm7300-t0 Firmware<5.42\(acbc.1\)c0
Zyxel Pm7300-t0
Zyxel Pmg5317-t20b Firmware<5.40\(abki.4\)c0
Zyxel Pmg5317-t20b
Zyxel Pmg5617ga Firmware<5.40\(abna.2\)c0
Zyxel Pmg5617ga
Zyxel Pmg5617-t20b2 Firmware<5.41\(acbb.1\)c0
Zyxel Pmg5617-t20b2
Zyxel Pmg5622ga Firmware<5.40\(abnb.2\)c0
Zyxel Pmg5622ga
Zyxel Px7501-b0 Firmware<5.17\(abpc.1\)c0
Zyxel Px7501-b0
Event History
Apr 11, 2022
CVE Published
via MITRE·12:05 PM
Data Sourced
via MITRE·12:05 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2022-26414?
CVE-2022-26414 has a severity rating that suggests it can lead to a denial of service if exploited.
2
How do I fix CVE-2022-26414?
To fix CVE-2022-26414, update the Zyxel VMG3312-T20A firmware to a version that addresses this vulnerability.
3
Who is affected by CVE-2022-26414?
CVE-2022-26414 primarily affects users of the Zyxel VMG3312-T20A firmware version 5.30(ABFX.5)C0.
4
Can CVE-2022-26414 be exploited remotely?
CVE-2022-26414 requires local authenticated access, hence it is not a remote exploitation vulnerability.
5
What are the potential impacts of CVE-2022-26414?
The potential impact of CVE-2022-26414 includes causing a denial of service on the affected device.