An improper restriction of operations within the bounds of a memory buffer in the parameter type parser of the Zyxel VMG8825-T50K firmware versions through 5.50(ABOM.8)C0 could allow an authenticated attacker with administrator privileges to cause potential memory corruptions, resulting in a thread crash on an affected device.
Affected:< 5.17(abpc.5)c0Fixed in:5.17(abpc.5)c0CVE-2024-38266derived from NVD
ax7501-b1 firmwareNVD
Affected:< 5.17(abpc.5)c0Fixed in:5.17(abpc.5)c0CVE-2024-38266derived from NVD
dx3300-t0 firmwareNVD
Affected:< 5.50(abvy.5)c0Fixed in:5.50(abvy.5)c0CVE-2024-38266derived from NVD
dx3300-t1 firmwareNVD
Affected:< 5.50(abvy.5)c0Fixed in:5.50(abvy.5)c0CVE-2024-38266derived from NVD
dx3301-t0 firmwareNVD
Affected:< 5.50(abvy.5)c0Fixed in:5.50(abvy.5)c0CVE-2024-38266derived from NVD
dx4510-b0 firmwareNVD
Affected:< 5.17(abyl.6)c0Fixed in:5.17(abyl.6)c0CVE-2024-38266derived from NVD
dx4510-b1 firmwareNVD
Affected:< 5.17(abyl.6)c0Fixed in:5.17(abyl.6)c0CVE-2024-38266derived from NVD
dx5401-b0 firmwareNVD
Affected:< 5.17(abyo.6)c0Fixed in:5.17(abyo.6)c0CVE-2024-38266derived from NVD
dx5401-b1 firmwareNVD
Affected:< 5.17(abyo.6)c0Fixed in:5.17(abyo.6)c0CVE-2024-38266derived from NVD
emg3525-t50b firmwareNVD
Affected:< 5.50(abpm.9)c0Fixed in:5.50(abpm.9)c0CVE-2024-38266derived from NVD
emg5523-t50b firmwareNVD
Affected:< 5.50(abpm.9)c0Fixed in:5.50(abpm.9)c0CVE-2024-38266derived from NVD
emg5723-t50k firmwareNVD
Affected:< 5.50(abom.8)c0Fixed in:5.50(abom.8)c0CVE-2024-38266derived from NVD
ex3300-t0 firmwareNVD
Affected:< 5.50(abvy.5)c0Fixed in:5.50(abvy.5)c0CVE-2024-38266derived from NVD
ex3300-t1 firmwareNVD
Affected:< 5.50(abvy.5)c0Fixed in:5.50(abvy.5)c0CVE-2024-38266derived from NVD
ex3301-t0 firmwareNVD
Affected:< 5.50(abvy.5)c0Fixed in:5.50(abvy.5)c0CVE-2024-38266derived from NVD
ex3500-t0 firmwareNVD
Affected:< 5.44(achr.1)c0Fixed in:5.44(achr.1)c0CVE-2024-38266derived from NVD
ex3501-t0 firmwareNVD
Affected:< 5.44(achr.1)c0Fixed in:5.44(achr.1)c0CVE-2024-38266derived from NVD
ex3510-b0 firmwareNVD
Affected:< 5.17(abup.11)c0Fixed in:5.17(abup.11)c0CVE-2024-38266derived from NVD
ex3510-b1 firmwareNVD
Affected:< 5.17(abup.11)c0Fixed in:5.17(abup.11)c0CVE-2024-38266derived from NVD
ex3600-t0 firmwareNVD
Affected:< 5.70(acif.0.2)c0Fixed in:5.70(acif.0.2)c0CVE-2024-38266derived from NVD
ex5401-b0 firmwareNVD
Affected:< 5.17(abyo.6)c0Fixed in:5.17(abyo.6)c0CVE-2024-38266derived from NVD
ex5401-b1 firmwareNVD
Affected:< 5.17(abyo.6)c0Fixed in:5.17(abyo.6)c0CVE-2024-38266derived from NVD
ex5510-b0 firmwareNVD
Affected:< 5.17(abqx.9)c0Fixed in:5.17(abqx.9)c0CVE-2024-38266derived from NVD
ex5512-t0 firmwareNVD
Affected:< 5.70(aceg.3)c1Fixed in:5.70(aceg.3)c1CVE-2024-38266derived from NVD
ex5601-t0 firmwareNVD
Affected:< 5.70(acdz.3)c0Fixed in:5.70(acdz.3)c0CVE-2024-38266derived from NVD
ex5601-t1 firmwareNVD
Affected:< 5.70(acdz.3)c0Fixed in:5.70(acdz.3)c0CVE-2024-38266derived from NVD
ex7501-b0 firmwareNVD
Affected:< 5.18(achn.1)c0Fixed in:5.18(achn.1)c0CVE-2024-38266derived from NVD
ex7710-b0 firmwareNVD
Affected:< 5.18(acak.1)c0Fixed in:5.18(acak.1)c0CVE-2024-38266derived from NVD
pm3100-t0 firmwareNVD
Affected:< 5.42(acbf.2)c0Fixed in:5.42(acbf.2)c0CVE-2024-38266derived from NVD
pm5100-t0 firmwareNVD
Affected:< 5.42(acbf.2)c0Fixed in:5.42(acbf.2)c0CVE-2024-38266derived from NVD
pm7300-t0 firmwareNVD
Affected:< 5.42(abyy.2.1)c0Fixed in:5.42(abyy.2.1)c0CVE-2024-38266derived from NVD
px3321-t1 firmwareNVD
Affected:< 5.44(acjb.0)c0Fixed in:5.44(acjb.0)c0CVE-2024-38266derived from NVD
scr50axe firmwareNVD
Affected:< 1.10(acgn.3)c0Fixed in:1.10(acgn.3)c0CVE-2024-38266derived from NVD
vmg3625-t50b firmwareNVD
Affected:< 5.50(abpm.9)c0Fixed in:5.50(abpm.9)c0CVE-2024-38266derived from NVD
vmg3927-t50k firmwareNVD
Affected:< 5.50(abom.8)c0Fixed in:5.50(abom.8)c0CVE-2024-38266derived from NVD
vmg4005-b50a firmwareNVD
Affected:< 5.17(abqa.2)c0Fixed in:5.17(abqa.2)c0CVE-2024-38266derived from NVD
vmg4005-b60a firmwareNVD
Affected:< 5.17(abqa.2)c0Fixed in:5.17(abqa.2)c0CVE-2024-38266derived from NVD
vmg8623-t50b firmwareNVD
Affected:< 5.50(abpm.9)c0Fixed in:5.50(abpm.9)c0CVE-2024-38266derived from NVD
vmg8825-t50k firmwareNVD
Affected:< 5.50(abpy.1)b24Fixed in:5.50(abpy.1)b24CVE-2024-38266derived from NVD
wx3100-t0 firmwareNVD
Affected:< 5.50(abvl.4.3)c0Fixed in:5.50(abvl.4.3)c0CVE-2024-38266derived from NVD
wx3401-b0 firmwareNVD
Affected:< 5.17(abve.2.5)c0Fixed in:5.17(abve.2.5)c0CVE-2024-38266derived from NVD
wx5600-t0 firmwareNVD
Affected:< 5.70(aceb.3.2)c0Fixed in:5.70(aceb.3.2)c0CVE-2024-38266derived from NVD
Remediation is compiled from vendor and distribution security advisories. Always confirm against the linked source for your exact version and platform.
CVSS v3 Vector
Exploitability
Attack VectorNetwork
Attack ComplexityLow
Privileges RequiredHigh
User InteractionNone
ScopeUnchanged
Impact
ConfidentialityNone
IntegrityNone
AvailabilityHigh
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Exploit Intelligence
0.43%probability of exploitation in 30 days
35thpercentile
Low risk: more likely to be exploited than 35% of all known CVEs.
TridentStack Control continuously scans your Windows, macOS, and Linux fleet for known vulnerabilities, prioritizes them by severity and active exploitation, and patches them automatically.
This product uses NVD data but is not endorsed or certified by the NVD. EPSS scores courtesy of FIRST.org (https://www.first.org/epss). Source: CISA KEV Catalog. Data as of 2026-02-24.
