Buffer overflow in Zyxel VMG3625-T50B firmware
Priority LOW 23CWE-120Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- High
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Denial of service
- Confidentiality · integrity · availability
- None · None · High
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-120 and the CVSS impact.
Summary
A post-authentication buffer overflow vulnerability in the parameter "action" of the CGI program in Zyxel VMG3625-T50B firmware versions through V5.50(ABPM.9.2)C0 could allow an authenticated attacker with administrator privileges to cause a temporary denial of service (DoS) condition against the web management interface by sending a crafted HTTP GET request to a vulnerable device if the function ZyEE is enabled.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.0051 43rd percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Zyxel | VMG3625-T50B firmware | up to V5.50(ABPM.9.2)C0 | — | No fix listed | CNA |
- VMG3625-T50B firmware VendorZyxel Affected up to V5.50(ABPM.9.2)C0 Fixed in — No fix listed CNA
CPE configurations NVD · 73
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:zyxel:dx3300-t0_firmware:*:*:*:*:*:*:*:* | before 5.50\(aby.5.4\)c0 | Vulnerable | Zyxel |
| cpe:2.3:h:zyxel:dx3300-t0:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Zyxel |
| cpe:2.3:o:zyxel:dx3300-t1_firmware:*:*:*:*:*:*:*:* | before 5.50\(aby.5.4\)c0 | Vulnerable | Zyxel |
| cpe:2.3:h:zyxel:dx3300-t1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Zyxel |
| cpe:2.3:o:zyxel:dx3301-t0_firmware:*:*:*:*:*:*:*:* | before 5.50\(aby.5.4\)c0 | Vulnerable | Zyxel |
| cpe:2.3:h:zyxel:dx3301-t0:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Zyxel |
| cpe:2.3:o:zyxel:dx4510-b0_firmware:*:*:*:*:*:*:*:* | before 5.17\(abyl.8\)c0 | Vulnerable | Zyxel |
| cpe:2.3:h:zyxel:dx4510-b0:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Zyxel |
| cpe:2.3:o:zyxel:dx4510-b1_firmware:*:*:*:*:*:*:*:* | before 5.17\(abyl.8\)c0 | Vulnerable | Zyxel |
| cpe:2.3:h:zyxel:dx4510-b1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Zyxel |
- cpe:2.3:o:zyxel:dx3300-t0_firmware:*:*:*:*:*:*:*:* Versions before 5.50\(aby.5.4\)c0 Vulnerable ·Zyxel
- cpe:2.3:h:zyxel:dx3300-t0:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Zyxel
- cpe:2.3:o:zyxel:dx3300-t1_firmware:*:*:*:*:*:*:*:* Versions before 5.50\(aby.5.4\)c0 Vulnerable ·Zyxel
- cpe:2.3:h:zyxel:dx3300-t1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Zyxel
- cpe:2.3:o:zyxel:dx3301-t0_firmware:*:*:*:*:*:*:*:* Versions before 5.50\(aby.5.4\)c0 Vulnerable ·Zyxel
- cpe:2.3:h:zyxel:dx3301-t0:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Zyxel
- cpe:2.3:o:zyxel:dx4510-b0_firmware:*:*:*:*:*:*:*:* Versions before 5.17\(abyl.8\)c0 Vulnerable ·Zyxel
- cpe:2.3:h:zyxel:dx4510-b0:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Zyxel
- cpe:2.3:o:zyxel:dx4510-b1_firmware:*:*:*:*:*:*:*:* Versions before 5.17\(abyl.8\)c0 Vulnerable ·Zyxel
- cpe:2.3:h:zyxel:dx4510-b1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Zyxel
Show 63 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:zyxel:dx5401-b0_firmware:*:*:*:*:*:*:*:* | before 5.17\(abyo.6.4\)c0 | Vulnerable | Zyxel |
| cpe:2.3:h:zyxel:dx5401-b0:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Zyxel |
| cpe:2.3:o:zyxel:dx5401-b1_firmware:*:*:*:*:*:*:*:* | before 5.17\(abyo.6.4\)c0 | Vulnerable | Zyxel |
| cpe:2.3:h:zyxel:dx5401-b1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Zyxel |
| cpe:2.3:o:zyxel:ee6510-10_firmware:*:*:*:*:*:*:*:* | before 5.19\(acjq.1\)c0 | Vulnerable | Zyxel |
| cpe:2.3:h:zyxel:ee6510-10:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Zyxel |
| cpe:2.3:o:zyxel:ex3300-t0_firmware:*:*:*:*:*:*:*:* | before 5.50\(aby.5.4\)c0 | Vulnerable | Zyxel |
| cpe:2.3:h:zyxel:ex3300-t0:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Zyxel |
| cpe:2.3:o:zyxel:ex3300-t1_firmware:*:*:*:*:*:*:*:* | before 5.50\(aby.5.4\)c0 | Vulnerable | Zyxel |
| cpe:2.3:h:zyxel:ex3300-t1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Zyxel |
| cpe:2.3:o:zyxel:ex3301-t0_firmware:*:*:*:*:*:*:*:* | before 5.50\(aby.5.4\)c0 | Vulnerable | Zyxel |
| cpe:2.3:h:zyxel:ex3301-t0:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Zyxel |
| cpe:2.3:o:zyxel:ex3500-t0_firmware:*:*:*:*:*:*:*:* | before 5.44\(achr.3\)c0 | Vulnerable | Zyxel |
| cpe:2.3:h:zyxel:ex3500-t0:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Zyxel |
| cpe:2.3:o:zyxel:ex3501-t0_firmware:*:*:*:*:*:*:*:* | before 5.44\(achr.3\)c0 | Vulnerable | Zyxel |
| cpe:2.3:h:zyxel:ex3501-t0:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Zyxel |
| cpe:2.3:o:zyxel:ex3510-b0_firmware:*:*:*:*:*:*:*:* | before 5.17\(abup.13\)c0 | Vulnerable | Zyxel |
| cpe:2.3:h:zyxel:ex3510-b0:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Zyxel |
| cpe:2.3:o:zyxel:ex3510-b1_firmware:*:*:*:*:*:*:*:* | before 5.17\(abup.13\)c0 | Vulnerable | Zyxel |
| cpe:2.3:h:zyxel:ex3510-b1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Zyxel |
| cpe:2.3:o:zyxel:ex5401-b0_firmware:*:*:*:*:*:*:*:* | before 5.17\(abyo.6.4\)c0 | Vulnerable | Zyxel |
| cpe:2.3:h:zyxel:ex5401-b0:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Zyxel |
| cpe:2.3:o:zyxel:ex5401-b1_firmware:*:*:*:*:*:*:*:* | before 5.17\(abyo.6.4\)c0 | Vulnerable | Zyxel |
| cpe:2.3:h:zyxel:ex5401-b1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Zyxel |
| cpe:2.3:o:zyxel:ex5501-b0_firmware:*:*:*:*:*:*:*:* | before 5.17\(abry.5.3\)c0 | Vulnerable | Zyxel |
| cpe:2.3:h:zyxel:ex5501-b0:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Zyxel |
| cpe:2.3:o:zyxel:ex5510-b0_firmware:*:*:*:*:*:*:*:* | before 5.17\(abqx.11\)c0 | Vulnerable | Zyxel |
| cpe:2.3:h:zyxel:ex5510-b0:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Zyxel |
| cpe:2.3:o:zyxel:ex5600-t1_firmware:*:*:*:*:*:*:*:* | before 5.70\(acdz.3.4\)c0 | Vulnerable | Zyxel |
| cpe:2.3:h:zyxel:ex5600-t1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Zyxel |
| cpe:2.3:o:zyxel:ex5601-t0_firmware:*:*:*:*:*:*:*:* | before 5.70\(acdz.3.4\)c0 | Vulnerable | Zyxel |
| cpe:2.3:h:zyxel:ex5601-t0:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Zyxel |
| cpe:2.3:o:zyxel:ex5601-t1_firmware:*:*:*:*:*:*:*:* | before 5.70\(acdz.3.4\)c0 | Vulnerable | Zyxel |
| cpe:2.3:h:zyxel:ex5601-t1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Zyxel |
| cpe:2.3:o:zyxel:ex7501-b0_firmware:*:*:*:*:*:*:*:* | before 5.18\(achn.1.3\)c0 | Vulnerable | Zyxel |
| cpe:2.3:h:zyxel:ex7501-b0:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Zyxel |
| cpe:2.3:o:zyxel:emg3525-t50b_firmware:*:*:*:*:*:*:*:* | before 5.50\(abpm.9.3\)c0 | Vulnerable | Zyxel |
| cpe:2.3:h:zyxel:emg3525-t50b:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Zyxel |
| cpe:2.3:o:zyxel:emg5523-t50b_firmware:*:*:*:*:*:*:*:* | before 5.50\(abpm.9.3\)c0 | Vulnerable | Zyxel |
| cpe:2.3:h:zyxel:emg5523-t50b:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Zyxel |
| cpe:2.3:o:zyxel:emg5723-t50k_firmware:*:*:*:*:*:*:*:* | before 5.50\(abom.8.5\)c0 | Vulnerable | Zyxel |
| cpe:2.3:h:zyxel:emg5723-t50k:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Zyxel |
| cpe:2.3:o:zyxel:vmg3625-t50b_firmware:*:*:*:*:*:*:*:* | before 5.50\(abpm.9.3\)c0 | Vulnerable | Zyxel |
| cpe:2.3:h:zyxel:vmg3625-t50b:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Zyxel |
| cpe:2.3:o:zyxel:vmg3927-t50k_firmware:*:*:*:*:*:*:*:* | before 5.50\(abom.8.5\)c0 | Vulnerable | Zyxel |
| cpe:2.3:h:zyxel:vmg3927-t50k:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Zyxel |
| cpe:2.3:o:zyxel:vmg8623-t50b_firmware:*:*:*:*:*:*:*:* | before 5.50\(abpm.9.3\)c0 | Vulnerable | Zyxel |
| cpe:2.3:h:zyxel:vmg8623-t50b:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Zyxel |
| cpe:2.3:o:zyxel:vmg8825-t50k_firmware:*:*:*:*:*:*:*:* | before 5.50\(abom.8.5\)c0 | Vulnerable | Zyxel |
| cpe:2.3:h:zyxel:vmg8825-t50k:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Zyxel |
| cpe:2.3:o:zyxel:ax7501-b0_firmware:*:*:*:*:*:*:*:* | before 5.17\(abpc.5.3\)c0 | Vulnerable | Zyxel |
| cpe:2.3:h:zyxel:ax7501-b0:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Zyxel |
| cpe:2.3:o:zyxel:ax7501-b1_firmware:*:*:*:*:*:*:*:* | before 5.17\(abpc.5.3\)c0 | Vulnerable | Zyxel |
| cpe:2.3:h:zyxel:ax7501-b1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Zyxel |
| cpe:2.3:o:zyxel:ex3600-t0_firmware:*:*:*:*:*:*:*:* | before 5.70\(acif.0.4\)c0 | Vulnerable | Zyxel |
| cpe:2.3:h:zyxel:ex3600-t0:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Zyxel |
| cpe:2.3:o:zyxel:px3321-t1_firmware:*:*:*:*:*:*:*:* | before 5.44\(acjb.1.1\)c0 | Vulnerable | Zyxel |
| cpe:2.3:h:zyxel:px3321-t1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Zyxel |
| cpe:2.3:o:zyxel:px3321-t1_firmware:*:*:*:*:*:*:*:* | before 5.44\(achk.0.3\)c0 | Vulnerable | Zyxel |
| cpe:2.3:o:zyxel:px5301-t0_firmware:*:*:*:*:*:*:*:* | before 5.44\(ackb.0.1\)c0 | Vulnerable | Zyxel |
| cpe:2.3:h:zyxel:px5301-t0:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Zyxel |
| cpe:2.3:o:zyxel:wx5600-t0_firmware:*:*:*:*:*:*:*:* | before 5.70\(aceb.3.3\)c0 | Vulnerable | Zyxel |
| cpe:2.3:h:zyxel:wx5600-t0:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Zyxel |
- cpe:2.3:o:zyxel:dx5401-b0_firmware:*:*:*:*:*:*:*:* Versions before 5.17\(abyo.6.4\)c0 Vulnerable ·Zyxel
- cpe:2.3:h:zyxel:dx5401-b0:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Zyxel
- cpe:2.3:o:zyxel:dx5401-b1_firmware:*:*:*:*:*:*:*:* Versions before 5.17\(abyo.6.4\)c0 Vulnerable ·Zyxel
- cpe:2.3:h:zyxel:dx5401-b1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Zyxel
- cpe:2.3:o:zyxel:ee6510-10_firmware:*:*:*:*:*:*:*:* Versions before 5.19\(acjq.1\)c0 Vulnerable ·Zyxel
- cpe:2.3:h:zyxel:ee6510-10:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Zyxel
- cpe:2.3:o:zyxel:ex3300-t0_firmware:*:*:*:*:*:*:*:* Versions before 5.50\(aby.5.4\)c0 Vulnerable ·Zyxel
- cpe:2.3:h:zyxel:ex3300-t0:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Zyxel
- cpe:2.3:o:zyxel:ex3300-t1_firmware:*:*:*:*:*:*:*:* Versions before 5.50\(aby.5.4\)c0 Vulnerable ·Zyxel
- cpe:2.3:h:zyxel:ex3300-t1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Zyxel
- cpe:2.3:o:zyxel:ex3301-t0_firmware:*:*:*:*:*:*:*:* Versions before 5.50\(aby.5.4\)c0 Vulnerable ·Zyxel
- cpe:2.3:h:zyxel:ex3301-t0:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Zyxel
- cpe:2.3:o:zyxel:ex3500-t0_firmware:*:*:*:*:*:*:*:* Versions before 5.44\(achr.3\)c0 Vulnerable ·Zyxel
- cpe:2.3:h:zyxel:ex3500-t0:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Zyxel
- cpe:2.3:o:zyxel:ex3501-t0_firmware:*:*:*:*:*:*:*:* Versions before 5.44\(achr.3\)c0 Vulnerable ·Zyxel
- cpe:2.3:h:zyxel:ex3501-t0:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Zyxel
- cpe:2.3:o:zyxel:ex3510-b0_firmware:*:*:*:*:*:*:*:* Versions before 5.17\(abup.13\)c0 Vulnerable ·Zyxel
- cpe:2.3:h:zyxel:ex3510-b0:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Zyxel
- cpe:2.3:o:zyxel:ex3510-b1_firmware:*:*:*:*:*:*:*:* Versions before 5.17\(abup.13\)c0 Vulnerable ·Zyxel
- cpe:2.3:h:zyxel:ex3510-b1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Zyxel
- cpe:2.3:o:zyxel:ex5401-b0_firmware:*:*:*:*:*:*:*:* Versions before 5.17\(abyo.6.4\)c0 Vulnerable ·Zyxel
- cpe:2.3:h:zyxel:ex5401-b0:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Zyxel
- cpe:2.3:o:zyxel:ex5401-b1_firmware:*:*:*:*:*:*:*:* Versions before 5.17\(abyo.6.4\)c0 Vulnerable ·Zyxel
- cpe:2.3:h:zyxel:ex5401-b1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Zyxel
- cpe:2.3:o:zyxel:ex5501-b0_firmware:*:*:*:*:*:*:*:* Versions before 5.17\(abry.5.3\)c0 Vulnerable ·Zyxel
- cpe:2.3:h:zyxel:ex5501-b0:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Zyxel
- cpe:2.3:o:zyxel:ex5510-b0_firmware:*:*:*:*:*:*:*:* Versions before 5.17\(abqx.11\)c0 Vulnerable ·Zyxel
- cpe:2.3:h:zyxel:ex5510-b0:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Zyxel
- cpe:2.3:o:zyxel:ex5600-t1_firmware:*:*:*:*:*:*:*:* Versions before 5.70\(acdz.3.4\)c0 Vulnerable ·Zyxel
- cpe:2.3:h:zyxel:ex5600-t1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Zyxel
- cpe:2.3:o:zyxel:ex5601-t0_firmware:*:*:*:*:*:*:*:* Versions before 5.70\(acdz.3.4\)c0 Vulnerable ·Zyxel
- cpe:2.3:h:zyxel:ex5601-t0:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Zyxel
- cpe:2.3:o:zyxel:ex5601-t1_firmware:*:*:*:*:*:*:*:* Versions before 5.70\(acdz.3.4\)c0 Vulnerable ·Zyxel
- cpe:2.3:h:zyxel:ex5601-t1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Zyxel
- cpe:2.3:o:zyxel:ex7501-b0_firmware:*:*:*:*:*:*:*:* Versions before 5.18\(achn.1.3\)c0 Vulnerable ·Zyxel
- cpe:2.3:h:zyxel:ex7501-b0:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Zyxel
- cpe:2.3:o:zyxel:emg3525-t50b_firmware:*:*:*:*:*:*:*:* Versions before 5.50\(abpm.9.3\)c0 Vulnerable ·Zyxel
- cpe:2.3:h:zyxel:emg3525-t50b:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Zyxel
- cpe:2.3:o:zyxel:emg5523-t50b_firmware:*:*:*:*:*:*:*:* Versions before 5.50\(abpm.9.3\)c0 Vulnerable ·Zyxel
- cpe:2.3:h:zyxel:emg5523-t50b:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Zyxel
- cpe:2.3:o:zyxel:emg5723-t50k_firmware:*:*:*:*:*:*:*:* Versions before 5.50\(abom.8.5\)c0 Vulnerable ·Zyxel
- cpe:2.3:h:zyxel:emg5723-t50k:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Zyxel
- cpe:2.3:o:zyxel:vmg3625-t50b_firmware:*:*:*:*:*:*:*:* Versions before 5.50\(abpm.9.3\)c0 Vulnerable ·Zyxel
- cpe:2.3:h:zyxel:vmg3625-t50b:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Zyxel
- cpe:2.3:o:zyxel:vmg3927-t50k_firmware:*:*:*:*:*:*:*:* Versions before 5.50\(abom.8.5\)c0 Vulnerable ·Zyxel
- cpe:2.3:h:zyxel:vmg3927-t50k:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Zyxel
- cpe:2.3:o:zyxel:vmg8623-t50b_firmware:*:*:*:*:*:*:*:* Versions before 5.50\(abpm.9.3\)c0 Vulnerable ·Zyxel
- cpe:2.3:h:zyxel:vmg8623-t50b:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Zyxel
- cpe:2.3:o:zyxel:vmg8825-t50k_firmware:*:*:*:*:*:*:*:* Versions before 5.50\(abom.8.5\)c0 Vulnerable ·Zyxel
- cpe:2.3:h:zyxel:vmg8825-t50k:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Zyxel
- cpe:2.3:o:zyxel:ax7501-b0_firmware:*:*:*:*:*:*:*:* Versions before 5.17\(abpc.5.3\)c0 Vulnerable ·Zyxel
- cpe:2.3:h:zyxel:ax7501-b0:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Zyxel
- cpe:2.3:o:zyxel:ax7501-b1_firmware:*:*:*:*:*:*:*:* Versions before 5.17\(abpc.5.3\)c0 Vulnerable ·Zyxel
- cpe:2.3:h:zyxel:ax7501-b1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Zyxel
- cpe:2.3:o:zyxel:ex3600-t0_firmware:*:*:*:*:*:*:*:* Versions before 5.70\(acif.0.4\)c0 Vulnerable ·Zyxel
- cpe:2.3:h:zyxel:ex3600-t0:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Zyxel
- cpe:2.3:o:zyxel:px3321-t1_firmware:*:*:*:*:*:*:*:* Versions before 5.44\(acjb.1.1\)c0 Vulnerable ·Zyxel
- cpe:2.3:h:zyxel:px3321-t1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Zyxel
- cpe:2.3:o:zyxel:px3321-t1_firmware:*:*:*:*:*:*:*:* Versions before 5.44\(achk.0.3\)c0 Vulnerable ·Zyxel
- cpe:2.3:o:zyxel:px5301-t0_firmware:*:*:*:*:*:*:*:* Versions before 5.44\(ackb.0.1\)c0 Vulnerable ·Zyxel
- cpe:2.3:h:zyxel:px5301-t0:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Zyxel
- cpe:2.3:o:zyxel:wx5600-t0_firmware:*:*:*:*:*:*:*:* Versions before 5.70\(aceb.3.3\)c0 Vulnerable ·Zyxel
- cpe:2.3:h:zyxel:wx5600-t0:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Zyxel
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2024-9197
- 2026-10-03 Alias added: GHSA-xf8q-6qq2-4pq3
More Zyxel Ax7501-b0 Firmware vulnerabilities
- TI-2025-07956 OS command injection in Zyxel DX3300-T0 firmware CVSS 3.1HIGH 8.8
- TI-2022-21188 OS command injection in Zyxel NR7101 firmware CVSS 3.1HIGH 8.8
- TI-2024-05028 Buffer overflow in Zyxel VMG8825-T50K firmware CVSS 3.1HIGH 7.5
- TI-2025-05994 Uncontrolled resource consumption in Zyxel DX3301-T0 firmware CVSS 3.1HIGH 7.5
- TI-2024-08115 Buffer overflow in Zyxel VMG8825-T50K firmware CVSS 3.1HIGH 7.5
- TI-2024-11143 OS command injection in Zyxel AX7501-B1 firmware CVSS 3.1HIGH 7.2
Sources
- CVE-2024-9197 · CVE Program
- CVE-2024-9197 · NVD
- FIRST EPSS
- GHSA-xf8q-6qq2-4pq3 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences