PT-2024-39223
CVE-2024-8748
·
Published
2024-12-03
·
Updated
2025-01-21
Description by
CVSS 3.1
7.5
HighMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions:
Zyxel VMG8825-T50K firmware versions through V5.50(ABOM.8.4)C0
Description:
A buffer overflow vulnerability in the packet parser of the third-party library "libclinkc" could allow an attacker to cause a temporary denial of service (DoS) condition against the web management interface by sending a crafted HTTP POST request to a vulnerable device.
Recommendations:
For Zyxel VMG8825-T50K firmware versions through V5.50(ABOM.8.4)C0, consider disabling the web management interface until a patch is available to prevent exploitation of the buffer overflow vulnerability in the "libclinkc" library.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾