CVE-2024-8748: Buffer Overflow
Published Dec 3, 2024
·Updated
A buffer overflow vulnerability in the packet parser of the third-party library "libclinkc" in Zyxel VMG8825-T50K firmware versions through V5.50(ABOM.8.4)C0 could allow an attacker to cause a temporary denial of service (DoS) condition against the web management interface by sending a crafted HTTP POST request to a vulnerable device.
Affected Software
131 affected components
Zyxel VMG8825-T50K<=V5.50(ABOM.8.4)C0
All of the following
Zyxel Lte3301-plus Firmware<1.00\(abqu.6\)c0
Zyxel Lte3301-plus
All of the following
Zyxel Lte5388-m804 Firmware<1.00\(absq.5\)c0
Zyxel Lte5388-m804
All of the following
Zyxel Lte5398-m904 Firmware<1.00\(abq.5\)c0
Zyxel Lte5398-m904
All of the following
Zyxel Lte7480-m804 Firmware<1.00\(abra.10\)c0
Zyxel Lte7480-m804
All of the following
Zyxel Lte7490-m904 Firmware<1.00\(abqy.9\)c0
Zyxel Lte7490-m904
All of the following
Zyxel NR7101 firmware<1.00\(abu.11\)c0
Zyxel NR7101
All of the following
Zyxel Nr7102 Firmware<1.00\(abyd.4\)c0
Zyxel Nr7102
All of the following
Zyxel Nebula Nr5101 Firmware<1.16\(accg.1\)c0
Zyxel Nebula Nr5101
All of the following
Zyxel Nebula Nr7101 Firmware<1.16\(accc.1\)c0
Zyxel Nebula Nr7101
All of the following
Zyxel Nebula Lte3301-plus Firmware<1.18\(acca.5\)c0
Zyxel Nebula Lte3301-plus
All of the following
Zyxel DX3300-T0 firmware<5.50\(aby.5.4\)c0
Zyxel DX3300-T0
All of the following
Zyxel Dx3300-t1 Firmware<5.50\(aby.5.4\)c0
Zyxel Dx3300-t1
All of the following
Zyxel DX3301-T0 firmware<5.50\(aby.5.4\)c0
Zyxel DX3301-T0
All of the following
Zyxel Dx4510-b0 Firmware<5.17\(abyl.8\)c0
Zyxel Dx4510-b0
All of the following
Zyxel Dx4510-b1 Firmware<5.17\(abyl.8\)c0
Zyxel Dx4510-b1
All of the following
Zyxel DX5401-B0 firmware<5.17\(abyo.6.4\)c0
Zyxel DX5401-B0
All of the following
Zyxel Dx5401-b1 Firmware<5.17\(abyo.6.4\)c0
Zyxel Dx5401-b1
All of the following
Zyxel Ee6510-10 Firmware<5.19\(acjq.1\)c0
Zyxel Ee6510-10
All of the following
Zyxel Ex2210-t0 Firmware<5.50\(acdi.2\)c0
Zyxel Ex2210-t0
All of the following
Zyxel Ex3300-t0 Firmware<5.50\(aby.5.4\)c0
Zyxel Ex3300-t0
All of the following
Zyxel Ex3300-t1 Firmware<5.50\(aby.5.4\)c0
Zyxel Ex3300-t1
All of the following
Zyxel EX3301-T0 firmware<5.50\(aby.5.4\)c0
Zyxel EX3301-T0
All of the following
Zyxel Ex3500-t0 Firmware<5.44\(achr.3\)c0
Zyxel Ex3500-t0
All of the following
Zyxel Ex3501-t0 Firmware<5.44\(achr.3\)c0
Zyxel Ex3501-t0
All of the following
Zyxel EX3510-B0 firmware<5.17\(abup.13\)c0
Zyxel EX3510-B0
All of the following
Zyxel Ex3510-b1 Firmware<5.17\(abup.13\)c0
Zyxel Ex3510-b1
All of the following
Zyxel Ex3600-t0 Firmware<5.70\(acif.0.4\)c0
Zyxel Ex3600-t0
All of the following
Zyxel Ex5401-b0 Firmware<5.17\(abyo.6.4\)c0
Zyxel Ex5401-b0
All of the following
Zyxel Ex5401-b1 Firmware<5.17\(abyo.6.4\)c0
Zyxel Ex5401-b1
All of the following
Zyxel Ex5501-b0 Firmware<5.17\(abry.5.3\)c0
Zyxel Ex5501-b0
All of the following
Zyxel Ex5510-b0 Firmware<5.17\(abqx.11\)c0
Zyxel Ex5510-b0
All of the following
Zyxel Ex5512-t0 Firmware<5.70\(aceg4.2\)c0
Zyxel Ex5512-t0
All of the following
Zyxel Ex5600-t1 Firmware<5.70\(acdz.3.4\)c0
Zyxel Ex5600-t1
All of the following
Zyxel Ex5601-t0 Firmware<5.70\(acdz.3.4\)c0
Zyxel Ex5601-t0
All of the following
Zyxel EX5601-T1 firmware<5.70\(acdz.3.4\)c0
Zyxel EX5601-T1
All of the following
Zyxel Ex7501-b0 Firmware<5.18\(achn.1.3\)c0
Zyxel Ex7501-b0
All of the following
Zyxel Ex7710-b0 Firmware<5.18\(acak.1.1\)c0
Zyxel Ex7710-b0
All of the following
Zyxel Emg3525-t50b Firmware<5.50\(abpm.9.3\)c0
Zyxel Emg3525-t50b
All of the following
Zyxel Emg5523-t50b Firmware<5.50\(abpm.9.3\)c0
Zyxel Emg5523-t50b
All of the following
Zyxel Emg5723-t50k Firmware<5.50\(abom.8.5\)c0
Zyxel Emg5723-t50k
All of the following
Zyxel Emg6726-b10a Firmware<5.13\(abnp.8\)c1
Zyxel Emg6726-b10a
All of the following
Zyxel VMG3625-T50B firmware<5.50\(abpm.9.3\)c0
Zyxel VMG3625-T50B
All of the following
Zyxel Vmg3927-b50b Firmware<5.13\(ably.9\)c1
Zyxel Vmg3927-b50b
All of the following
Zyxel Vmg3927-t50k Firmware<5.50\(abom.8.5\)c0
Zyxel Vmg3927-t50k
All of the following
Zyxel VMG4005-B50A firmware<5.15\(abqa.2.3\)c0
Zyxel VMG4005-B50A
All of the following
Zyxel Vmg4005-b60a Firmware<5.15\(abqa.2.3\)c0
Zyxel Vmg4005-b60a
All of the following
Zyxel Vmg4005-b50b Firmware<5.13\(abrl.5.2\)c0
Zyxel Vmg4005-b50b
All of the following
Zyxel Vmg4927-b50a Firmware<5.13\(ably.9\)c1
Zyxel Vmg4927-b50a
All of the following
Zyxel Vmg8623-t50b Firmware<5.50\(abpm.9.3\)c0
Zyxel Vmg8623-t50b
All of the following
Zyxel VMG8825-T50K firmware<5.50\(abom.8.5\)c0
Zyxel VMG8825-T50K
All of the following
Zyxel VMG8825-T50K firmware<5.50\(abpy.1\)b26
Zyxel VMG8825-T50K
All of the following
Zyxel AX7501-B0 firmware<5.17\(abpc.5.3\)c0
Zyxel AX7501-B0
All of the following
Zyxel AX7501-B1 firmware<5.17\(abpc.5.3\)c0
Zyxel AX7501-B1
All of the following
Zyxel Pm3100-t0 Firmware<5.42\(acbf.3\)c0
Zyxel Pm3100-t0
All of the following
Zyxel Pm5100-t0 Firmware<5.42\(acbf.3\)c0
Zyxel Pm5100-t0
All of the following
Zyxel Pm7300-t0 Firmware<5.42\(abyy.2.3\)c0
Zyxel Pm7300-t0
All of the following
Zyxel Pm7500-t0 Firmware<5.61\(ackk.0.1\)c0
Zyxel Pm7500-t0
All of the following
Zyxel Px3321-t1 Firmware<5.44\(acjb.1.1\)c0
Zyxel Px3321-t1
All of the following
Zyxel Px3321-t1 Firmware<5.44\(achk.0.3\)c0
Zyxel Px3321-t1
All of the following
Zyxel Px5301-t0 Firmware<5.44\(ackb.0.1\)c0
Zyxel Px5301-t0
All of the following
Zyxel WX3100-T0 firmware<5.50\(abl.4.4\)c0
Zyxel WX3100-T0
All of the following
Zyxel Wx3401-b0 Firmware<5.17\(abe.2.6\)c0
Zyxel Wx3401-b0
All of the following
Zyxel Wx3401-b1 Firmware<5.17\(abe.2.6\)c0
Zyxel Wx3401-b1
All of the following
Zyxel Wx5600-t0 Firmware<5.70\(aceb.3.3\)c0
Zyxel Wx5600-t0
All of the following
Zyxel Wx5610-b0 Firmware<5.18\(acgj0.1\)c0
Zyxel Wx5610-b0
Event History
Dec 3, 2024
CVE Published
via MITRE·01:15 AM
Data Sourced
via MITRE·01:15 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·02:15 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-8748?
CVE-2024-8748 has a medium severity rating due to its ability to cause a temporary denial of service condition.
2
How do I fix CVE-2024-8748?
To fix CVE-2024-8748, users should update the firmware of the affected Zyxel devices to versions later than V5.50(ABOM.8.5)C0.
3
What devices are affected by CVE-2024-8748?
CVE-2024-8748 affects multiple Zyxel devices including the VMG8825-T50K and various LTE models.
4
What type of vulnerability is CVE-2024-8748?
CVE-2024-8748 is a buffer overflow vulnerability in the packet parser of the libclinkc library.
5
Can exploitation of CVE-2024-8748 lead to unauthorized access?
Exploitation of CVE-2024-8748 may not lead to unauthorized access but could disrupt access to the device's management interface.