CVE-2024-8748 - A buffer overflow vulnerability in the packet parser of the third-party library "libclinkc" in Zyxel VMG8825-T50K firmware versions through V5.50(ABOM.8.4)C0 could allow an attacker to cause a temporary denial of service (DoS) condition against the web management interface by sending a crafted HTTP POST request to a vulnerable device · CoreCVE

Back Back to CVE browser

HIGH

A buffer overflow vulnerability in the packet parser of the third-party library "libclinkc" in Zyxel VMG8825-T50K firmware versions through V5.50(ABOM.8.4)C0 could allow an attacker to cause a temporary denial of service (DoS) condition against the web management interface by sending a crafted HTTP POST request to a vulnerable device

Published Dec 3, 2024

7.5

HIGH

CVSS 3.1

EPSS 0.52%

Description

A buffer overflow vulnerability in the packet parser of the third-party library "libclinkc" in Zyxel VMG8825-T50K firmware versions through V5.50(ABOM.8.4)C0 could allow an attacker to cause a temporary denial of service (DoS) condition against the web management interface by sending a crafted HTTP POST request to a vulnerable device.

Affected products

Vendor Zyxel Product VMG8825-T50K firmware Default
unaffected
- Version
  <= V5.50(ABOM.8.4)C0
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

VMG8825-T50K firmware

unaffected

Version	Status	Constraints
<= V5.50(ABOM.8.4)C0	affected	-

Vendor Zyxel Product Ax7501-B0 Firmware Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=5.17\(abpc.5.2\)c0
Vendor Zyxel Product Ax7501-B1 Firmware Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=5.17\(abpc.5.2\)c0
Vendor Zyxel Product Dx3300-T0 Firmware Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=5.50\(abvy.5.3\)c0
Vendor Zyxel Product Dx3300-T1 Firmware Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=5.50(abvy.5.3)c0
Vendor Zyxel Product Dx3301-T0 Firmware Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=5.50\(abvy.5.3\)c0
Vendor Zyxel Product Dx4510-B0 Firmware Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=5.17\(abyl.7\)c0
Vendor Zyxel Product Dx4510-B1 Firmware Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=5.17\(abyl.7\)c0
Vendor Zyxel Product Dx5401-B0 Firmware Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=5.17\(abyo.6.3\)c0
Vendor Zyxel Product Dx5401 B1 Firmware Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=5.17\(abyo.6.3\)c0
Vendor Zyxel Product Ee6510-10 Firmware Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=5.19\(acjq.0\)c0
Vendor Zyxel Product Ex2210-T0 Firmware Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=5.50\(acdi.1\)c0
Vendor Zyxel Product Lte3301-Plus Firmware Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=1.00\(abqu.5\)c0
Vendor Zyxel Product Lte5388-M804 Firmware Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=1.00\(absq.4\)c0
Vendor Zyxel Product Lte5398-M904 Firmware Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=1.00\(abqv.4\)c0
Vendor Zyxel Product Lte7480-M804 Firmware Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=1.00\(abra.9\)c0
Vendor Zyxel Product Lte7490-M904 Firmware Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=1.00\(abqy.8\)c0
Vendor Zyxel Product Nebula Lte3301-Plus Firmware Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=1.18\(acca.4\)c0
Vendor Zyxel Product Nebula Nr5101 Firmware Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <1.16\(accg.0\)c0
Vendor Zyxel Product Nebula Nr7101 Firmware Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=1.16\(accc.0\)c0
Vendor Zyxel Product Nr7101 Firmware Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=1.00\(abuv.10\)c0
Vendor Zyxel Product Nr7102 Firmware Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=v1.00\(abyd.3\)c0
Vendor Zyxel Product Pm3100-T0 Firmware Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=5.42(acbf.2.1)c0
Vendor Zyxel Product Pm5100-T0 Firmware Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=5.42\(acbf.2.1\)c0
Vendor Zyxel Product Pm7300-T0 Firmware Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=5.42\(abyy.2.2\)c0
Vendor Zyxel Product Pm7500-T0 Firmware Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=5.61\(ackk.0\)c0
Vendor Zyxel Product Px3321-T1 Firmware Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=5.44\(achk.0.2\)c0
- Version
  0
  Status
  affected
  Constraints
  <=5.44\(acjb.1\)c0
Vendor Zyxel Product Px5301-T0 Firmware Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=5.44\(ackb.0\)c0
Vendor Zyxel Product Vmg8825-T50k Firmware Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=5.50\(abom.8.4\)c0
Vendor Zyxel Product Wx3100-T0 Firmware Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=5.50\(abvl.4.3\)c0
Vendor Zyxel Product Wx3401-B0 Firmware Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=5.17\(abve.2.5\)c0
Vendor Zyxel Product Wx3401-B1 Firmware Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=5.17(abve.2.5)c0
Vendor Zyxel Product Wx5600-T0 Firmware Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=5.70\(aceb.3.2\)c0
Vendor Zyxel Product Wx5610-B0 Firmware Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=5.18\(acgj.0\)c2

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Ax7501-B0 Firmware

n/a

Version	Status	Constraints
0	affected	<=5.17\(abpc.5.2\)c0

Ax7501-B1 Firmware

n/a

Version	Status	Constraints
0	affected	<=5.17\(abpc.5.2\)c0

Dx3300-T0 Firmware

n/a

Version	Status	Constraints
0	affected	<=5.50\(abvy.5.3\)c0

Dx3300-T1 Firmware

n/a

Version	Status	Constraints
0	affected	<=5.50(abvy.5.3)c0

Dx3301-T0 Firmware

n/a

Version	Status	Constraints
0	affected	<=5.50\(abvy.5.3\)c0

Dx4510-B0 Firmware

n/a

Version	Status	Constraints
0	affected	<=5.17\(abyl.7\)c0

Dx4510-B1 Firmware

n/a

Version	Status	Constraints
0	affected	<=5.17\(abyl.7\)c0

Dx5401-B0 Firmware

n/a

Version	Status	Constraints
0	affected	<=5.17\(abyo.6.3\)c0

Dx5401 B1 Firmware

n/a

Version	Status	Constraints
0	affected	<=5.17\(abyo.6.3\)c0

Ee6510-10 Firmware

n/a

Version	Status	Constraints
0	affected	<=5.19\(acjq.0\)c0

Ex2210-T0 Firmware

n/a

Version	Status	Constraints
0	affected	<=5.50\(acdi.1\)c0

Lte3301-Plus Firmware

n/a

Version	Status	Constraints
0	affected	<=1.00\(abqu.5\)c0

Lte5388-M804 Firmware

n/a

Version	Status	Constraints
0	affected	<=1.00\(absq.4\)c0

Lte5398-M904 Firmware

n/a

Version	Status	Constraints
0	affected	<=1.00\(abqv.4\)c0

Lte7480-M804 Firmware

n/a

Version	Status	Constraints
0	affected	<=1.00\(abra.9\)c0

Lte7490-M904 Firmware

n/a

Version	Status	Constraints
0	affected	<=1.00\(abqy.8\)c0

Nebula Lte3301-Plus Firmware

n/a

Version	Status	Constraints
0	affected	<=1.18\(acca.4\)c0

Nebula Nr5101 Firmware

n/a

Version	Status	Constraints
0	affected	<1.16\(accg.0\)c0

Nebula Nr7101 Firmware

n/a

Version	Status	Constraints
0	affected	<=1.16\(accc.0\)c0

Nr7101 Firmware

n/a

Version	Status	Constraints
0	affected	<=1.00\(abuv.10\)c0

Nr7102 Firmware

n/a

Version	Status	Constraints
0	affected	<=v1.00\(abyd.3\)c0

Pm3100-T0 Firmware

n/a

Version	Status	Constraints
0	affected	<=5.42(acbf.2.1)c0

Pm5100-T0 Firmware

n/a

Version	Status	Constraints
0	affected	<=5.42\(acbf.2.1\)c0

Pm7300-T0 Firmware

n/a

Version	Status	Constraints
0	affected	<=5.42\(abyy.2.2\)c0

Pm7500-T0 Firmware

n/a

Version	Status	Constraints
0	affected	<=5.61\(ackk.0\)c0

Px3321-T1 Firmware

n/a

Version	Status	Constraints
0	affected	<=5.44\(achk.0.2\)c0
0	affected	<=5.44\(acjb.1\)c0

Px5301-T0 Firmware

n/a

Version	Status	Constraints
0	affected	<=5.44\(ackb.0\)c0

Vmg8825-T50k Firmware

n/a

Version	Status	Constraints
0	affected	<=5.50\(abom.8.4\)c0

Wx3100-T0 Firmware

n/a

Version	Status	Constraints
0	affected	<=5.50\(abvl.4.3\)c0

Wx3401-B0 Firmware

n/a

Version	Status	Constraints
0	affected	<=5.17\(abve.2.5\)c0

Wx3401-B1 Firmware

n/a

Version	Status	Constraints
0	affected	<=5.17(abve.2.5)c0

Wx5600-T0 Firmware

n/a

Version	Status	Constraints
0	affected	<=5.70\(aceb.3.2\)c0

Wx5610-B0 Firmware

n/a

Version	Status	Constraints
0	affected	<=5.18\(acgj.0\)c2

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-120

Classic Buffer Overflow

References (2)

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-49603		Advisory
https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-buffer-overflow-and-post-authentication-command-injection-vulnerabilities-in-some-4g-lte-5g-nr-cpe-dsl-ethernet-cpe-fiber-onts-and-wifi-extenders-12-03-2024		vendor-advisoryVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner Zyxel

Published Dec 3, 2024

Updated Dec 3, 2024

Reserved Sep 12, 2024

Link CVE-2024-8748

CISA Vulnrichment

Updated Dec 3, 2024

Status Analyzed

Modified Jun 17, 2026

Link CVE-2024-8748

Severity n/a

Public date n/a

Links CVE-2024-8748

Assigner Zyxel

Published Dec 3, 2024

Updated Dec 3, 2024

Exploited since n/a

Link EUVD-2024-49603

EUVD-2024-49603