CVE-2022-26414

A potential buffer overflow vulnerability was identified in some internal functions of Zyxel VMG3312-T20A firmware version 5.30(ABFX.5)C0, which could be exploited by a local authenticated attacker to cause a denial of service.
Classic Buffer Overflow
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
6 MEDIUM
LOCAL
LOW
HIGH
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H
ZyxelCNA
6 MEDIUM
LOCAL
LOW
HIGH
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 12%
VendorProductVersion
zyxelvmg3312-t20a_firmware
5.30\(abfx.5\)c0
zyxelemg3525-t50b_firmware
𝑥
< 5.50\(abpm.6\)c0
zyxelemg3525-t50b_firmware
𝑥
< 5.50\(abpm.6\)c0
zyxelemg5523-t50b_firmware
𝑥
< 5.50\(abpm.6\)c0
zyxelemg5523-t50b_firmware
𝑥
< 5.50\(abpm.6\)c0
zyxelemg5723-t50k_firmware
𝑥
< 5.50\(abom.7\)c0
zyxelemg6726-b10a_firmware
𝑥
< 5.13\(abnp.7\)c0
zyxelvmg1312-t20b_firmware
𝑥
< 5.50\(absb.5\)c0
zyxelvmg3625-t50b_firmware
𝑥
< 5.50\(abpm.6\)c0
zyxelvmg3927-b50a_firmware
𝑥
< 5.17\(abmt.6\)c0
zyxelvmg3927-b50b_firmware
𝑥
< 5.13\(ably.7\)c0
zyxelvmg3927-b60a_firmware
𝑥
< 5.17\(abmt.6\)c0
zyxelvmg3927-t50k_firmware
𝑥
< 5.50\(abom.7\)c0
zyxelvmg4927-b50a_firmware
𝑥
< 5.13\(ably.7\)c0
zyxelvmg8623-t50b_firmware
𝑥
< 5.50\(abpm.6\)c0
zyxelvmg8825-b50a_firmware
𝑥
< 5.17\(abmt.6\)c0
zyxelvmg8825-b50b_firmware
𝑥
< 5.17\(abny.7\)c0
zyxelvmg8825-t50k_firmware
𝑥
< 5.50\(abom.7\)c0
zyxelvmg8825-b60a_firmware
𝑥
< 5.17\(abmt.6\)c0
zyxelvmg8825-b60b_firmware
𝑥
< 5.17\(abny.7\)c0
zyxelxmg3927-b50a_firmware
𝑥
< 5.17\(abmt.6\)c0
zyxelxmg8825-b50a_firmware
𝑥
< 5.17\(abmt.6\)c0
zyxeldx5401-b0_firmware
𝑥
< 5.17\(abyo.1\)c0
zyxelex3510-b0_firmware
𝑥
< 5.17\(abup.4\)c1
zyxelex5401-b0_firmware
𝑥
< 5.17\(abyo.1\)c0
zyxelex5501-b0_firmware
𝑥
< 5.17\(abry.2\)c0
zyxelax7501-b0_firmware
𝑥
< 5.17\(abpc.1\)c0
zyxelep240p_firmware
𝑥
< 5.40\(abh.0\)c0
zyxelpm7300-t0_firmware
𝑥
< 5.42\(acbc.1\)c0
zyxelpmg5317-t20b_firmware
𝑥
< 5.40\(abki.4\)c0
zyxelpmg5617ga_firmware
𝑥
< 5.40\(abna.2\)c0
zyxelpmg5617-t20b2_firmware
𝑥
< 5.41\(acbb.1\)c0
zyxelpmg5622ga_firmware
𝑥
< 5.40\(abnb.2\)c0
zyxelpx7501-b0_firmware
𝑥
< 5.17\(abpc.1\)c0
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://www.zyxel.com/support/OS-command-injection-and-buffer-overflow-vulnerabilities-of-CPE-and-ONTs.shtml
https://www.zyxel.com/support/OS-command-injection-and-buffer-overflow-vulnerabilities-of-CPE-and-ONTs.shtml