CVE-2024-5412: Buffer Overflow
Published Sep 3, 2024
·Updated
A buffer overflow vulnerability in the library "libclinkc" of the Zyxel VMG8825-T50K firmware version 5.50(ABOM.8)C0 could allow an unauthenticated attacker to cause denial of service (DoS) conditions by sending a crafted HTTP request to a vulnerable device.
Affected Software
100 affected components
All of the following
Zyxel Nebula Lte3301-plus Firmware<1.18\(acca.4\)c0
Zyxel Nebula Lte3301-plus
All of the following
Zyxel Nebula Fwa505 Firmware<1.18\(acko.4\)c0
Zyxel Nebula Fwa505
All of the following
Zyxel Nebula Fwa710 Firmware<1.18\(acgc.4\)c0
Zyxel Nebula Fwa710
All of the following
Zyxel Nebula Fwa510 Firmware<1.18\(acgd.4\)c0
Zyxel Nebula Fwa510
All of the following
Zyxel Wx5600-t0 Firmware<5.70\(aceb.3.2\)c0
Zyxel Wx5600-t0
All of the following
Zyxel Wx3401-b0 Firmware<5.17\(abve.2.5\)c0
Zyxel Wx3401-b0
All of the following
Zyxel WX3100-T0 firmware<5.50\(abvl.4.2\)c0
Zyxel WX3100-T0
All of the following
Zyxel Scr50axe Firmware<1.10\(acgn.3\)c0
Zyxel Scr 50axe
All of the following
Zyxel Px3321-t1 Firmware<5.44\(acjb.0.2\)z0
Zyxel Px3321-t1
All of the following
Zyxel Pm7300-t0 Firmware<5.42\(abyy.2.2\)c0
Zyxel Pm7300-t0
All of the following
Zyxel Pm5100-t0 Firmware<5.42\(acbf.2.1\)c0
Zyxel Pm5100-t0
All of the following
Zyxel Pm3100-t0 Firmware<5.42\(acbf.2.1\)c0
Zyxel Pm3100-t0
All of the following
Zyxel AX7501-B1 firmware<5.17\(abpc.5.2\)c0
Zyxel AX7501-B1
All of the following
Zyxel AX7501-B0 firmware<5.17\(abpc.5.2\)c0
Zyxel AX7501-B0
All of the following
Zyxel VMG8825-T50K firmware<5.50\(abom.8.4\)c0
Zyxel VMG8825-T50K
All of the following
Zyxel Vmg8623-t50b Firmware<5.50\(abpm.9.2\)c0
Zyxel Vmg8623-t50b
All of the following
Zyxel Vmg4005-b60a Firmware<5.15\(abqa.2.2\)c0
Zyxel Vmg4005-b60a
All of the following
Zyxel VMG4005-B50A firmware<5.15\(abqa.2.2\)c0
Zyxel VMG4005-B50A
All of the following
Zyxel Vmg3927-t50k Firmware<5.50\(abom.8.4\)c0
Zyxel Vmg3927-t50k
All of the following
Zyxel VMG3625-T50B firmware<5.50\(abpm.9.2\)c0
Zyxel VMG3625-T50B
All of the following
Zyxel Emg5723-t50k Firmware<5.50\(abom.8.4\)c0
Zyxel Emg5723-t50k
All of the following
Zyxel Emg5523-t50b Firmware<5.50\(abpm.9.2\)c0
Zyxel Emg5523-t50b
All of the following
Zyxel Emg3525-t50b Firmware<5.50\(abpm.9.2\)c0
Zyxel Emg3525-t50b
All of the following
Zyxel Ex7710-b0 Firmware<5.18\(acak.1\)c1
Zyxel Ex7710-b0
All of the following
Zyxel Ex7501-b0 Firmware<5.18\(achn.1.2\)c0
Zyxel Ex7501-b0
All of the following
Zyxel EX5601-T1 firmware<5.70\(acdz.3.2\)c0
Zyxel EX5601-T1
All of the following
Zyxel Ex5601-t0 Firmware<5.70\(acdz.3.2\)c0
Zyxel Ex5601-t0
All of the following
Zyxel Ex5512-t0 Firmware<5.70\(aceg.3\)c2
Zyxel Ex5512-t0
All of the following
Zyxel Ex5510-b0 Firmware<5.17\(abqx.10\)b2
Zyxel Ex5510-b0
All of the following
Zyxel Ex5401-b1 Firmware<5.17\(abyo.6.2\)c0
Zyxel Ex5401-b1
All of the following
Zyxel Ex5401-b0 Firmware<5.17\(abyo.6.2\)c0
Zyxel Ex5401-b0
All of the following
Zyxel EX3510-B0 firmware<5.17\(abup.12\)b2
Zyxel EX3510-B0
All of the following
Zyxel Ex3501-t0 Firmware<5.44\(achr.2\)c0
Zyxel Ex3501-t0
All of the following
Zyxel Ex3500-t0 Firmware<5.44\(achr.2\)c0
Zyxel Ex3500-t0
All of the following
Zyxel EX3301-T0 firmware<5.50\(abvy.5.3\)c0
Zyxel EX3301-T0
All of the following
Zyxel Ex3300-t1 Firmware<5.50\(abvy.5.3\)c0
Zyxel Ex3300-t1
All of the following
Zyxel Ex3300-t0 Firmware<5.50\(abvy.5.3\)c0
Zyxel Ex3300-t0
All of the following
Zyxel Dx5401-b1 Firmware<5.17\(abyo.6.2\)c0
Zyxel Dx5401-b1
All of the following
Zyxel DX5401-B0 firmware<5.17\(abyo.6.2\)c0
Zyxel DX5401-B0
All of the following
Zyxel Dx4510-b0 Firmware<5.17\(abyl.7\)b2
Zyxel Dx4510-b0
All of the following
Zyxel DX3301-T0 firmware<5.50\(abvy.5.3\)c0
Zyxel DX3301-T0
All of the following
Zyxel Dx3300-t1 Firmware<5.50\(abvy.5.3\)c0
Zyxel Dx3300-t1
All of the following
Zyxel DX3300-T0 firmware<5.50\(abvy.5.3\)c0
Zyxel DX3300-T0
All of the following
Zyxel Nr7501 Firmware<1.00\(aceh.1\)c0
Zyxel Nr7501
All of the following
Zyxel Nr7303 Firmware<1.00\(acei.1\)b4
Zyxel Nr7303
All of the following
Zyxel Nr7302 Firmware<1.00\(acha.4\)c0
Zyxel Nr7302
All of the following
Zyxel Nr7103 Firmware<1.00\(accz.4\)c0
Zyxel Nr7103
All of the following
Zyxel Nr5307 Firmware<1.00\(acjt.0\)b6
Zyxel Nr5307
All of the following
Zyxel Nr5103ev2 Firmware<1.00\(aciq.1\)c0
Zyxel Nr5103ev2
All of the following
Zyxel Nr5103 Firmware<4.19\(abyc.6\)c0
Zyxel Nr5103
Event History
Sep 3, 2024
CVE Published
via MITRE·01:18 AM
Data Sourced
via MITRE·01:18 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·02:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-5412?
CVE-2024-5412 has been classified as a denial of service vulnerability which could lead to significant disruption in affected devices.
2
How do I fix CVE-2024-5412?
To fix CVE-2024-5412, you should update the firmware of the affected Zyxel devices to the latest version provided by Zyxel.
3
What devices are affected by CVE-2024-5412?
CVE-2024-5412 affects multiple Zyxel devices, specifically those using libclinkc in the firmware versions mentioned in the advisory.
4
Can CVE-2024-5412 be exploited remotely?
Yes, CVE-2024-5412 can be exploited remotely by an unauthenticated attacker through crafted HTTP requests.
5
What type of vulnerability is CVE-2024-5412?
CVE-2024-5412 is a buffer overflow vulnerability which can lead to denial of service conditions in the affected devices.