CVE-2024-38267: Buffer Overflow

Q: What is the severity of CVE-2024-38267?

CVE-2024-38267 is classified as having high severity due to its potential for memory corruption by an authenticated attacker.

Q: How do I fix CVE-2024-38267?

To mitigate CVE-2024-38267, upgrade the Zyxel firmware to a version above 5.50(ABOM.8)C0.

Q: Who is affected by CVE-2024-38267?

CVE-2024-38267 affects specific Zyxel devices running firmware versions through 5.50(ABOM.8)C0.

Q: What type of attack does CVE-2024-38267 allow?

CVE-2024-38267 allows an authenticated attacker to perform memory corruption attacks.

Q: Is CVE-2024-38267 a remote or local vulnerability?

CVE-2024-38267 is a local vulnerability requiring authenticated administrative access to exploit.

Published Sep 24, 2024

Updated

An improper restriction of operations within the bounds of a memory buffer in the IPv6 address parser of the Zyxel VMG8825-T50K firmware versions through 5.50(ABOM.8)C0 could allow an authenticated attacker with administrator privileges to cause potential memory corruptions, resulting in a thread crash on an affected device.

Affected Software

82 affected components

All of the following

Zyxel Wx5600-t0 Firmware<5.70\(aceb.3.2\)c0

Zyxel Wx5600-t0

All of the following

Zyxel Wx3401-b0 Firmware<5.17\(abve.2.5\)c0

Zyxel Wx3401-b0

All of the following

Zyxel WX3100-T0 firmware<5.50\(abvl.4.3\)c0

Zyxel WX3100-T0

All of the following

Zyxel Scr50axe Firmware<1.10\(acgn.3\)c0

Zyxel Scr 50axe

All of the following

Zyxel Px3321-t1 Firmware<5.44\(acjb.1\)c0

Zyxel Px3321-t1

All of the following

Zyxel Pm7300-t0 Firmware<5.42\(abyy.2.2\)c0

Zyxel Pm7300-t0

All of the following

Zyxel Pm5100-t0 Firmware<5.42\(acbf.2.1\)c0

Zyxel Pm5100-t0

All of the following

Zyxel Pm3100-t0 Firmware<5.42\(acbf.2.1\)c0

Zyxel Pm3100-t0

All of the following

Zyxel AX7501-B1 firmware<5.17\(abpc.5.2\)c0

Zyxel AX7501-B1

All of the following

Zyxel VMG8825-T50K firmware<5.50\(abom.8.4\)c0

Zyxel VMG8825-T50K

All of the following

Zyxel Vmg8623-t50b Firmware<5.50\(abpm.9.2\)c0

Zyxel Vmg8623-t50b

All of the following

Zyxel Vmg4005-b60a Firmware<5.17\(abqa.2.2\)c0

Zyxel Vmg4005-b60a

All of the following

Zyxel VMG4005-B50A firmware<5.17\(abqa.2.2\)c0

Zyxel VMG4005-B50A

All of the following

Zyxel Vmg3927-t50k Firmware<5.50\(abom.8.4\)c0

Zyxel Vmg3927-t50k

All of the following

Zyxel VMG3625-T50B firmware<5.50\(abpm.9.2\)c0

Zyxel VMG3625-T50B

All of the following

Zyxel Emg5723-t50k Firmware<5.50\(abom.8.4\)c0

Zyxel Emg5723-t50k

All of the following

Zyxel Emg5523-t50b Firmware<5.50\(abpm.9.2\)c0

Zyxel Emg5523-t50b

All of the following

Zyxel Emg3525-t50b Firmware<5.50\(abpm.9.2\)c0

Zyxel Emg3525-t50b

All of the following

Zyxel Ex7710-b0 Firmware<5.18\(acak.1\)c1

Zyxel Ex7710-b0

All of the following

Zyxel Ex7501-b0 Firmware<5.18\(achn.1.2\)c0

Zyxel Ex7501-b0

All of the following

Zyxel EX5601-T1 firmware<5.70\(acdz.3.2\)c0

Zyxel EX5601-T1

All of the following

Zyxel Ex5601-t0 Firmware<5.70\(acdz.3.2\)c0

Zyxel Ex5601-t0

All of the following

Zyxel Ex5512-t0 Firmware<5.70\(aceg.3\)c2

Zyxel Ex5512-t0

All of the following

Zyxel Ex5510-b0 Firmware<5.17\(abqx.10\)c0

Zyxel Ex5510-b0

All of the following

Zyxel Ex5401-b1 Firmware<5.17\(abyo.6.2\)c0

Zyxel Ex5401-b1

All of the following

Zyxel Ex5401-b0 Firmware<5.17\(abyo.6.2\)c0

Zyxel Ex5401-b0

All of the following

Zyxel Ex3600-t0 Firmware<5.70\(acif.0.3\)c0

Zyxel Ex3600-t0

All of the following

Zyxel Ex3510-b1 Firmware<5.17\(abup.12\)c0

Zyxel Ex3510-b1

All of the following

Zyxel EX3510-B0 firmware<5.17\(abup.12\)c0

Zyxel EX3510-B0

All of the following

Zyxel Ex3501-t0 Firmware<5.44\(achr.2\)c0

Zyxel Ex3501-t0

All of the following

Zyxel Ex3500-t0 Firmware<5.44\(achr.2\)c0

Zyxel Ex3500-t0

All of the following

Zyxel EX3301-T0 firmware<5.50\(abvy.5.3\)c0

Zyxel EX3301-T0

All of the following

Zyxel Ex3300-t1 Firmware<5.50\(abvy.5.3\)c0

Zyxel Ex3300-t1

All of the following

Zyxel Ex3300-t0 Firmware<5.50\(abvy.5.3\)c0

Zyxel Ex3300-t0

All of the following

Zyxel Dx5401-b1 Firmware<5.17\(abyo.6.2\)c0

Zyxel Dx5401-b1

All of the following

Zyxel DX5401-B0 firmware<5.17\(abyo.6.2\)c0

Zyxel DX5401-B0

All of the following

Zyxel Dx4510-b1 Firmware<5.17\(abyl.7\)c0

Zyxel Dx4510-b1

All of the following

Zyxel Dx4510-b0 Firmware<5.17\(abyl.7\)c0

Zyxel Dx4510-b0

All of the following

Zyxel DX3301-T0 firmware<5.50\(abvy.5.3\)c0

Zyxel DX3301-T0

All of the following

Zyxel Dx3300-t1 Firmware<5.50\(abvy.5.3\)c0

Zyxel Dx3300-t1

All of the following

Zyxel DX3300-T0 firmware<5.50\(abvy.5.3\)c0

Zyxel DX3300-T0

Event History

Sep 24, 2024

CVE Published

via MITRE·01:30 AM

Data Sourced

via MITRE·01:30 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·02:15 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2024-38267?

CVE-2024-38267 is classified as having high severity due to its potential for memory corruption by an authenticated attacker.

How do I fix CVE-2024-38267?

To mitigate CVE-2024-38267, upgrade the Zyxel firmware to a version above 5.50(ABOM.8)C0.

Who is affected by CVE-2024-38267?

CVE-2024-38267 affects specific Zyxel devices running firmware versions through 5.50(ABOM.8)C0.

What type of attack does CVE-2024-38267 allow?

CVE-2024-38267 allows an authenticated attacker to perform memory corruption attacks.

Is CVE-2024-38267 a remote or local vulnerability?

CVE-2024-38267 is a local vulnerability requiring authenticated administrative access to exploit.

CVE-2024-38267: Buffer Overflow

Affected Software

Event History

Don't miss critical vulnerabilities

Frequently Asked Questions

What is the severity of CVE-2024-38267?

How do I fix CVE-2024-38267?

Who is affected by CVE-2024-38267?

What type of attack does CVE-2024-38267 allow?

Is CVE-2024-38267 a remote or local vulnerability?

Company

Resources

Contact