CVE-2024-38268: Buffer Overflow

First published: Tue Sep 24 2024(Updated: )

An improper restriction of operations within the bounds of a memory buffer in the MAC address parser of the Zyxel VMG8825-T50K firmware versions through 5.50(ABOM.8)C0 could allow an authenticated attacker with administrator privileges to cause potential memory corruptions, resulting in a thread crash on an affected device.

Credit: security@zyxel.com.tw

Affected Software	Affected Version	How to fix
All of
Zyxel Wx5600-t0 Firmware	<5.70\(aceb.3.2\)c0
Zyxel Wx5600-t0
All of
Zyxel Wx3401-b0 Firmware	<5.17\(abve.2.5\)c0
Zyxel Wx3401-b0
All of
Zyxel Wx3100-t0 Firmware	<5.50\(abvl.4.3\)c0
Zyxel Wx3100-t0
All of
Zyxel Scr50axe Firmware	<1.10\(acgn.3\)c0
Zyxel Scr50axe
All of
Zyxel Px3321-t1 Firmware	<5.44\(acjb.1\)c0
Zyxel Px3321-t1
All of
Zyxel Pm7300-t0 Firmware	<5.42\(abyy.2.2\)c0
Zyxel Pm7300-t0
All of
Zyxel Pm5100-t0 Firmware	<5.42\(acbf.2.1\)c0
Zyxel Pm5100-t0
All of
Zyxel Pm3100-t0 Firmware	<5.42\(acbf.2.1\)c0
Zyxel Pm3100-t0
All of
Zyxel Ax7501-b1 Firmware	<5.17\(abpc.5.2\)c0
Zyxel Ax7501-b1
All of
Zyxel VMG8825-T50K firmware	<5.50\(abom.8.4\)c0
Zyxel VMG8825-T50K
All of
Zyxel Vmg8623-t50b Firmware	<5.50\(abpm.9.2\)c0
Zyxel Vmg8623-t50b
All of
Zyxel Vmg4005-b60a Firmware	<5.17\(abqa.2.2\)c0
Zyxel Vmg4005-b60a
All of
Zyxel Vmg4005-b50a Firmware	<5.17\(abqa.2.2\)c0
Zyxel Vmg4005-b50a
All of
Zyxel Vmg3927-t50k Firmware	<5.50\(abom.8.4\)c0
Zyxel Vmg3927-t50k
All of
Zyxel VMG3625-T50B firmware	<5.50\(abpm.9.2\)c0
Zyxel VMG3625-T50B
All of
Zyxel Emg5723-t50k Firmware	<5.50\(abom.8.4\)c0
Zyxel Emg5723-t50k
All of
Zyxel Emg5523-t50b Firmware	<5.50\(abpm.9.2\)c0
Zyxel Emg5523-t50b
All of
Zyxel Emg3525-t50b Firmware	<5.50\(abpm.9.2\)c0
Zyxel Emg3525-t50b
All of
Zyxel Ex7710-b0 Firmware	<5.18\(acak.1\)c1
Zyxel Ex7710-b0
All of
Zyxel Ex7501-b0 Firmware	<5.18\(achn.1.2\)c0
Zyxel Ex7501-b0
All of
Zyxel Ex5601-t1 Firmware	<5.70\(acdz.3.2\)c0
Zyxel Ex5601-t1
All of
Zyxel Ex5601-t0 Firmware	<5.70\(acdz.3.2\)c0
Zyxel Ex5601-t0
All of
Zyxel Ex5512-t0 Firmware	<5.70\(aceg.3\)c2
Zyxel Ex5512-t0
All of
Zyxel Ex5510-b0 Firmware	<5.17\(abqx.10\)c0
Zyxel Ex5510-b0
All of
Zyxel Ex5401-b1 Firmware	<5.17\(abyo.6.2\)c0
Zyxel Ex5401-b1
All of
Zyxel Ex5401-b0 Firmware	<5.17\(abyo.6.2\)c0
Zyxel Ex5401-b0
All of
Zyxel Ex3600-t0 Firmware	<5.70\(acif.0.3\)c0
Zyxel Ex3600-t0
All of
Zyxel Ex3510-b1 Firmware	<5.17\(abup.12\)c0
Zyxel Ex3510-b1
All of
Zyxel Ex3510-b0 Firmware	<5.17\(abup.12\)c0
Zyxel Ex3510-b0
All of
Zyxel Ex3501-t0 Firmware	<5.44\(achr.2\)c0
Zyxel Ex3501-t0
All of
Zyxel Ex3500-t0 Firmware	<5.44\(achr.2\)c0
Zyxel Ex3500-t0
All of
Zyxel Ex3301-t0 Firmware	<5.50\(abvy.5.3\)c0
Zyxel Ex3301-t0
All of
Zyxel Ex3300-t1 Firmware	<5.50\(abvy.5.3\)c0
Zyxel Ex3300-t1
All of
Zyxel Ex3300-t0 Firmware	<5.50\(abvy.5.3\)c0
Zyxel Ex3300-t0
All of
Zyxel Dx5401-b1 Firmware	<5.17\(abyo.6.2\)c0
Zyxel Dx5401-b1
All of
Zyxel DX5401-B0 firmware	<5.17\(abyo.6.2\)c0
Zyxel DX5401-B0
All of
Zyxel Dx4510-b1 Firmware	<5.17\(abyl.7\)c0
Zyxel Dx4510-b1
All of
Zyxel Dx4510-b0 Firmware	<5.17\(abyl.7\)c0
Zyxel Dx4510-b0
All of
Zyxel Dx3301-t0 Firmware	<5.50\(abvy.5.3\)c0
Zyxel Dx3301-t0
All of
Zyxel Dx3300-t1 Firmware	<5.50\(abvy.5.3\)c0
Zyxel Dx3300-t1
All of
Zyxel Dx3300-t0 Firmware	<5.50\(abvy.5.3\)c0
Zyxel Dx3300-t0

Never miss a vulnerability like this again

Reference Links

https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-post-authentication-memory-corruption-vulnerabilities-in-some-dsl-ethernet-cpe-fiber-ont-wifi-extender-and-security-router-versions-09-24-2024

CVE-2024-38268: Buffer Overflow

Never miss a vulnerability like this again

Reference Links

Company

Resources

Contact