CVE-2023-37929: Buffer Overflow

Published May 21, 2024
·
Updated

The buffer overflow vulnerability in the CGI program of the VMG3625-T50B firmware version V5.50(ABPM.8)C0 could allow an authenticated remote attacker to cause denial of service (DoS) conditions by sending a crafted HTTP request to a vulnerable device.

Affected Software

65 affected components
VMG VMG3625-T50B firmware
All of the following
Zyxel Dx3300-t1 Firmware=5.50\(aby.4\)c0
Zyxel Dx3300-t1
All of the following
Zyxel DX3301-T0 firmware=5.50\(aby.4\)c0
Zyxel DX3301-T0
All of the following
Zyxel Dx4510 Firmware=5.17\(abyl.5\)c0
Zyxel Dx4510
All of the following
Zyxel DX5401-B0 firmware=5.17\(abyo.5\)c0
Zyxel DX5401-B0
All of the following
Zyxel Dx5401-b1 Firmware=5.17\(abyo.5\)c0
Zyxel Dx5401-b1
All of the following
Zyxel Emg3525-t50b Firmware=5.50\(abpm.8\)c0
Zyxel Emg3525-t50b
All of the following
Zyxel Emg5523-t50b Firmware=5.50\(abpm.8\)c0
Zyxel Emg5523-t50b
All of the following
Zyxel Emg5723-t50k Firmware=5.50\(abom.8.2\)c0
Zyxel Emg5723-t50k
All of the following
Zyxel Ex3300-t1 Firmware=5.50\(aby.4\)c0
Zyxel Ex3300-t1
All of the following
Zyxel EX3301-T0 firmware=5.50\(aby.4\)c0
Zyxel EX3301-T0
All of the following
Zyxel Ex3500-t0 Firmware=5.44\(achr.0\)c0
Zyxel Ex3500-t0
All of the following
Zyxel Ex3501-t0 Firmware=5.44\(achr.0\)c0
Zyxel Ex3501-t0
All of the following
Zyxel Ex3510 Firmware=5.17\(abup.9\)c0
Zyxel Ex3510
All of the following
Zyxel Ex5401-b0 Firmware=5.17\(abyo.5\)c0
Zyxel Ex5401-b0
All of the following
Zyxel Ex5401-b1 Firmware=5.17\(abyo.5\)c0
Zyxel Ex5401-b1
All of the following
Zyxel Ex5501-b0 Firmware=5.17\(abry.4\)c0
Zyxel Ex5501-b0
All of the following
Zyxel Ex5510 Firmware=5.17\(abqx.8\)c0
Zyxel Ex5510
All of the following
Zyxel Ex5512-t0 Firmware=5.70\(aceg.2\)c0
Zyxel Ex5512-t0
All of the following
Zyxel Ex5600-t1 Firmware=5.70\(acdz.2\)c0
Zyxel Ex5600-t1
All of the following
Zyxel Ex5601-t0 Firmware=5.70\(acdz.2\)c0
Zyxel Ex5601-t0
All of the following
Zyxel EX5601-T1 firmware=5.70\(acdz.2\)c0
Zyxel EX5601-T1
All of the following
Zyxel Ex7710-b0 Firmware=5.18\(acak.0\)c0
Zyxel Ex7710-b0
All of the following
Zyxel VMG3625-T50B firmware=5.50\(abpm.8\)c0
Zyxel VMG3625-T50B
All of the following
Zyxel Vmg3927-t50k Firmware=5.50\(abom.8.2\)c0
Zyxel Vmg3927-t50k
All of the following
Zyxel Vmg8623-t50b Firmware=5.50\(abpm.8\)c0
Zyxel Vmg8623-t50b
All of the following
Zyxel VMG8825-T50K firmware=5.50\(abom.8.2\)c0
Zyxel VMG8825-T50K
All of the following
Zyxel AX7501-B0 firmware=5.17\(abpc.4\)c0
Zyxel AX7501-B0
All of the following
Zyxel AX7501-B1 firmware=5.17\(abpc.4\)c0
Zyxel AX7501-B1
All of the following
Zyxel WX3100-T0 firmware=5.50\(abl.3\)c0
Zyxel WX3100-T0
All of the following
Zyxel Wx5600-t0 Firmware=5.70\(aceb.2\)c0
Zyxel Wx5600-t0
All of the following
Zyxel Wx5610-b0 Firmware=5.18\(acgj.0\)c0
Zyxel Wx5610-b0
All of the following
Zyxel NBG7510 firmware=1.00\(abzy.5\)c0
Zyxel NBG7510

Event History

May 21, 2024
CVE Published
via MITRE·01:23 AM
Data Sourced
via MITRE·01:23 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·02:15 AM
DescriptionSeverityWeakness
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2023-37929?

CVE-2023-37929 is classified as a high-severity vulnerability due to its potential for leading to denial of service conditions.

2

How do I fix CVE-2023-37929?

To fix CVE-2023-37929, update the affected firmware of the Zyxel device to the latest version that addresses this vulnerability.

3

Which devices are affected by CVE-2023-37929?

CVE-2023-37929 affects several Zyxel devices, including the VMG3625-T50B firmware version V5.50(ABPM.8)C0.

4

What type of vulnerability is CVE-2023-37929?

CVE-2023-37929 is a buffer overflow vulnerability found in the CGI program of certain Zyxel device firmware.

5

Who can exploit CVE-2023-37929?

An authenticated remote attacker can exploit CVE-2023-37929 by sending crafted HTTP requests to the vulnerable device.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203