A post-authentication buffer overflow vulnerability in the parameter "action" of the CGI program in Zyxel VMG3625-T50B firmware versions through V5.50(ABPM.9.2)C0 could allow an authenticated attacker with administrator privileges to cause a temporary denial of service (DoS) condition against the web management interface by sending a crafted HTTP GET request to a vulnerable device if the function ZyEE is enabled.
Affected:< 5.17(abpc.5.3)c0Fixed in:5.17(abpc.5.3)c0CVE-2024-9197derived from NVD
ax7501-b1 firmwareNVD
Affected:< 5.17(abpc.5.3)c0Fixed in:5.17(abpc.5.3)c0CVE-2024-9197derived from NVD
dx3300-t0 firmwareNVD
Affected:< 5.50(aby.5.4)c0Fixed in:5.50(aby.5.4)c0CVE-2024-9197derived from NVD
dx3300-t1 firmwareNVD
Affected:< 5.50(aby.5.4)c0Fixed in:5.50(aby.5.4)c0CVE-2024-9197derived from NVD
dx3301-t0 firmwareNVD
Affected:< 5.50(aby.5.4)c0Fixed in:5.50(aby.5.4)c0CVE-2024-9197derived from NVD
dx4510-b0 firmwareNVD
Affected:< 5.17(abyl.8)c0Fixed in:5.17(abyl.8)c0CVE-2024-9197derived from NVD
dx4510-b1 firmwareNVD
Affected:< 5.17(abyl.8)c0Fixed in:5.17(abyl.8)c0CVE-2024-9197derived from NVD
dx5401-b0 firmwareNVD
Affected:< 5.17(abyo.6.4)c0Fixed in:5.17(abyo.6.4)c0CVE-2024-9197derived from NVD
dx5401-b1 firmwareNVD
Affected:< 5.17(abyo.6.4)c0Fixed in:5.17(abyo.6.4)c0CVE-2024-9197derived from NVD
ee6510-10 firmwareNVD
Affected:< 5.19(acjq.1)c0Fixed in:5.19(acjq.1)c0CVE-2024-9197derived from NVD
emg3525-t50b firmwareNVD
Affected:< 5.50(abpm.9.3)c0Fixed in:5.50(abpm.9.3)c0CVE-2024-9197derived from NVD
emg5523-t50b firmwareNVD
Affected:< 5.50(abpm.9.3)c0Fixed in:5.50(abpm.9.3)c0CVE-2024-9197derived from NVD
emg5723-t50k firmwareNVD
Affected:< 5.50(abom.8.5)c0Fixed in:5.50(abom.8.5)c0CVE-2024-9197derived from NVD
ex3300-t0 firmwareNVD
Affected:< 5.50(aby.5.4)c0Fixed in:5.50(aby.5.4)c0CVE-2024-9197derived from NVD
ex3300-t1 firmwareNVD
Affected:< 5.50(aby.5.4)c0Fixed in:5.50(aby.5.4)c0CVE-2024-9197derived from NVD
ex3301-t0 firmwareNVD
Affected:< 5.50(aby.5.4)c0Fixed in:5.50(aby.5.4)c0CVE-2024-9197derived from NVD
ex3500-t0 firmwareNVD
Affected:< 5.44(achr.3)c0Fixed in:5.44(achr.3)c0CVE-2024-9197derived from NVD
ex3501-t0 firmwareNVD
Affected:< 5.44(achr.3)c0Fixed in:5.44(achr.3)c0CVE-2024-9197derived from NVD
ex3510-b0 firmwareNVD
Affected:< 5.17(abup.13)c0Fixed in:5.17(abup.13)c0CVE-2024-9197derived from NVD
ex3510-b1 firmwareNVD
Affected:< 5.17(abup.13)c0Fixed in:5.17(abup.13)c0CVE-2024-9197derived from NVD
ex3600-t0 firmwareNVD
Affected:< 5.70(acif.0.4)c0Fixed in:5.70(acif.0.4)c0CVE-2024-9197derived from NVD
ex5401-b0 firmwareNVD
Affected:< 5.17(abyo.6.4)c0Fixed in:5.17(abyo.6.4)c0CVE-2024-9197derived from NVD
ex5401-b1 firmwareNVD
Affected:< 5.17(abyo.6.4)c0Fixed in:5.17(abyo.6.4)c0CVE-2024-9197derived from NVD
ex5501-b0 firmwareNVD
Affected:< 5.17(abry.5.3)c0Fixed in:5.17(abry.5.3)c0CVE-2024-9197derived from NVD
ex5510-b0 firmwareNVD
Affected:< 5.17(abqx.11)c0Fixed in:5.17(abqx.11)c0CVE-2024-9197derived from NVD
ex5600-t1 firmwareNVD
Affected:< 5.70(acdz.3.4)c0Fixed in:5.70(acdz.3.4)c0CVE-2024-9197derived from NVD
ex5601-t0 firmwareNVD
Affected:< 5.70(acdz.3.4)c0Fixed in:5.70(acdz.3.4)c0CVE-2024-9197derived from NVD
ex5601-t1 firmwareNVD
Affected:< 5.70(acdz.3.4)c0Fixed in:5.70(acdz.3.4)c0CVE-2024-9197derived from NVD
ex7501-b0 firmwareNVD
Affected:< 5.18(achn.1.3)c0Fixed in:5.18(achn.1.3)c0CVE-2024-9197derived from NVD
px3321-t1 firmwareNVD
Affected:< 5.44(achk.0.3)c0Fixed in:5.44(achk.0.3)c0CVE-2024-9197derived from NVD
px5301-t0 firmwareNVD
Affected:< 5.44(ackb.0.1)c0Fixed in:5.44(ackb.0.1)c0CVE-2024-9197derived from NVD
vmg3625-t50b firmwareNVD
Affected:< 5.50(abpm.9.3)c0Fixed in:5.50(abpm.9.3)c0CVE-2024-9197derived from NVD
vmg3927-t50k firmwareNVD
Affected:< 5.50(abom.8.5)c0Fixed in:5.50(abom.8.5)c0CVE-2024-9197derived from NVD
vmg8623-t50b firmwareNVD
Affected:< 5.50(abpm.9.3)c0Fixed in:5.50(abpm.9.3)c0CVE-2024-9197derived from NVD
vmg8825-t50k firmwareNVD
Affected:< 5.50(abom.8.5)c0Fixed in:5.50(abom.8.5)c0CVE-2024-9197derived from NVD
wx5600-t0 firmwareNVD
Affected:< 5.70(aceb.3.3)c0Fixed in:5.70(aceb.3.3)c0CVE-2024-9197derived from NVD
Remediation is compiled from vendor and distribution security advisories. Always confirm against the linked source for your exact version and platform.
CVSS v3 Vector
Exploitability
Attack VectorNetwork
Attack ComplexityLow
Privileges RequiredHigh
User InteractionNone
ScopeUnchanged
Impact
ConfidentialityNone
IntegrityNone
AvailabilityHigh
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Exploit Intelligence
0.49%probability of exploitation in 30 days
39thpercentile
Low risk: more likely to be exploited than 39% of all known CVEs.
TridentStack Control continuously scans your Windows, macOS, and Linux fleet for known vulnerabilities, prioritizes them by severity and active exploitation, and patches them automatically.
This product uses NVD data but is not endorsed or certified by the NVD. EPSS scores courtesy of FIRST.org (https://www.first.org/epss). Source: CISA KEV Catalog. Data as of 2025-01-21.
