CVE-2024-9197

MEDIUM Year: 2024
CVSS v3 Score
4.9
Medium
Weakness Type
CWE-120
View all →

Vulnerability Description

A post-authentication buffer overflow vulnerability in the parameter "action" of the CGI program in Zyxel VMG3625-T50B firmware versions through V5.50(ABPM.9.2)C0 could allow an authenticated attacker with administrator privileges to cause a temporary denial of service (DoS) condition against the web management interface by sending a crafted HTTP GET request to a vulnerable device if the function ZyEE is enabled.

Related Vulnerabilities

CVE-2021-28175

MEDIUM
CVSS:4.9(Medium)

The Radius configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileg...

CWE-1202021

CVE-2021-28176

MEDIUM
CVSS:4.9(Medium)

The DNS configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged ...

CWE-1202021

CVE-2021-28177

MEDIUM
CVSS:4.9(Medium)

The LDAP configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged...

CWE-1202021

CVE-2021-28178

MEDIUM
CVSS:4.9(Medium)

The UEFI configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged...

CWE-1202021

CVE-2021-28179

MEDIUM
CVSS:4.9(Medium)

The specific function in ASUS BMC’s firmware Web management page (Media support configuration setting) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability....

CWE-1202021

CVE-2021-28180

MEDIUM
CVSS:4.9(Medium)

The specific function in ASUS BMC’s firmware Web management page (Audit log configuration setting) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As ...

CWE-1202021