Medium severity · published May 21, 2024
CVE-2024-0816
The buffer overflow vulnerability in the DX3300-T1 firmware version V5.50(ABVY.4)C0 could allow an authenticated local attacker to cause denial of service (DoS) conditions by…
5.5
CVSS
0.1%
EPSS
No
On KEV
Description
The buffer overflow vulnerability in the DX3300-T1 firmware version V5.50(ABVY.4)C0 could allow an authenticated local attacker to cause denial of service (DoS) conditions by executing the CLI command with crafted strings on an affected device.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.1% · higher than 4% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AF
Ax7501-b0 Firmware · Zyxel
5.17(abpc.4)c0 · source: NVD
AF
Ax7501-b1 Firmware · Zyxel
5.17(abpc.4)c0 · source: NVD
DF
Dx3300-t1 Firmware · Zyxel
5.50(aby.4)c0 · source: NVD
DF
Dx3301-t0 Firmware · Zyxel
5.50(aby.4)c0 · source: NVD
DF
Dx4510 Firmware · Zyxel
5.17(abyl.6)c0 · source: NVD
DF
Dx5401-b0 Firmware · Zyxel
5.17(abyo.5)c0 · source: NVD
DF
Dx5401-b1 Firmware · Zyxel
5.17(abyo.5)c0 · source: NVD
EF
Emg3525-t50b Firmware · Zyxel
5.50(abpm.8)c0 · source: NVD
EF
Emg5523-t50b Firmware · Zyxel
5.50(abpm.8)c0 · source: NVD
EF
Emg5723-t50k Firmware · Zyxel
5.50(abom.8.2)c0 · source: NVD
EF
Ex3300-t1 Firmware · Zyxel
5.50(aby.4)c0 · source: NVD
EF
Ex3301-t0 Firmware · Zyxel
5.50(aby.4)c0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-0816
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-0816
Vendor Advisory
https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-buffer-overflow-vulnerabilities-in-some-5g-nr-4g-lte-cpe-dsl-ethernet-cpe-fiber-ont-wifi-extender-and-home-router-devices-05-21-2024
More from Ax7501-b0 Firmware
8.8
CVE-2025-8693
A post-authentication command injection vulnerability in the "priv" parameter of Zyxel DX3300-T0 firmware version 5.50(ABVY.6.3)C0 and earlier could allow an authenticated…
8.8
CVE-2022-43390
A command injection vulnerability in the CGI program of Zyxel NR7101 firmware prior to V1.15(ACCC.3)C0, which could allow an authenticated attacker to execute some OS commands on…
8.0
CVE-2022-26413
A command injection vulnerability in the CGI program of Zyxel VMG3312-T20A firmware version 5.30(ABFX.5)C0 could allow a local authenticated attacker to execute arbitrary OS…
7.5
CVE-2025-6599
An uncontrolled resource consumption vulnerability in the web server of Zyxel DX3301-T0 firmware version 5.50(ABVY.6.3)C0 and earlier could allow an attacker to perform…
7.5
CVE-2024-8748
A buffer overflow vulnerability in the packet parser of the third-party library "libclinkc" in Zyxel VMG8825-T50K firmware versions through V5.50(ABOM.8.4)C0 could allow an…