What’s Vulnerable › Vulnerabilities
CVE-2023-37929
- Severity: medium (CVSS 6.5 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.5% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2024-05-21 · updated 2026-06-17
- Weakness: CWE-120
Description
The buffer overflow vulnerability in the CGI program of the VMG3625-T50B firmware version V5.50(ABPM.8)C0 could allow an authenticated remote attacker to cause denial of service (DoS) conditions by sending a crafted HTTP request to a vulnerable device.
Affected products
- Zyxel AX7501-B0 firmware: 5.17(abpc.4)c0
- Zyxel AX7501-B1 firmware: 5.17(abpc.4)c0
- Zyxel DX3300-T1 firmware: 5.50(aby.4)c0
- Zyxel DX3301-T0 firmware: 5.50(aby.4)c0
- Zyxel Dx4510 Firmware: 5.17(abyl.5)c0
- Zyxel DX5401-B0 firmware: 5.17(abyo.5)c0
- Zyxel Dx5401-B1 Firmware: 5.17(abyo.5)c0
- Zyxel Emg3525-T50B Firmware: 5.50(abpm.8)c0
- Zyxel Emg5523-T50B Firmware: 5.50(abpm.8)c0
- Zyxel Emg5723-T50K Firmware: 5.50(abom.8.2)c0
- Zyxel Ex3300-T1 Firmware: 5.50(aby.4)c0
- Zyxel EX3301-T0 firmware: 5.50(aby.4)c0
- Zyxel Ex3500-T0 Firmware: 5.44(achr.0)c0
- Zyxel EX3501-T0 firmware: 5.44(achr.0)c0
- Zyxel Ex3510 Firmware: 5.17(abup.9)c0
- Zyxel Ex5401-B0 Firmware: 5.17(abyo.5)c0
- Zyxel Ex5401-B1 Firmware: 5.17(abyo.5)c0
- Zyxel Ex5501-B0 Firmware: 5.17(abry.4)c0
- Zyxel Ex5510 Firmware: 5.17(abqx.8)c0
- Zyxel Ex5512-T0 Firmware: 5.70(aceg.2)c0
- Zyxel Ex5600-T1 Firmware: 5.70(acdz.2)c0
- Zyxel Ex5601-T0 Firmware: 5.70(acdz.2)c0
- Zyxel EX5601-T1 firmware: 5.70(acdz.2)c0
- Zyxel Ex7710-B0 Firmware: 5.18(acak.0)c0
- Zyxel NBG7510 firmware: 1.00(abzy.5)c0
- Zyxel VMG3625-T50B firmware: 5.50(abpm.8)c0
- Zyxel Vmg3927-T50K Firmware: 5.50(abom.8.2)c0
- Zyxel Vmg8623-T50B Firmware: 5.50(abpm.8)c0
- Zyxel VMG8825-T50K firmware: 5.50(abom.8.2)c0
- Zyxel WX3100-T0 firmware: 5.50(abl.3)c0
References
- https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-buffer-overflow-vulnerabilities-in-some-5g-nr-4g-lte-cpe-dsl-ethernet-cpe-fiber-ont-wifi-extender-and-home-router-devices-05-21-2024
- https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-buffer-overflow-vulnerabilities-in-some-5g-nr-4g-lte-cpe-dsl-ethernet-cpe-fiber-ont-wifi-extender-and-home-router-devices-05-21-2024
Get alerted when CVE-2023-37929 or the next vulnerability affects your stack