CVE-2024-5412 Memory corruption in VMG8825-T50K firmware

High 7.5 Published 3 Sep 2024 Updated 3 Sep 2024

An unauthenticated attacker can cause denial of service on Zyxel VMG8825-T50K devices by sending a crafted HTTP request exploiting a buffer overflow.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2024-5412?

CVE-2024-5412 is a high-severity memory corruption vulnerability in Zyxel VMG8825-T50K firmware, published on 3 Sep 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

A buffer overflow vulnerability in the library "libclinkc" of the Zyxel VMG8825-T50K firmware version 5.50(ABOM.8)C0 could allow an unauthenticated attacker to cause denial of service (DoS) conditions by sending a crafted HTTP request to a vulnerable device.

Weakness: CWE-120

Which versions are affected by CVE-2024-5412?

It affects 50 products.

Products include Zyxel Ax7501-B0 Firmware, Zyxel Ax7501-B1 Firmware, Zyxel Dx3300-T0 Firmware, Zyxel Dx3300-T1 Firmware, Zyxel Dx3301-T0 Firmware, Zyxel Dx4510-B0 Firmware and 44 more.

How do I fix CVE-2024-5412?

No fix has been published for CVE-2024-5412 yet. Limit exposure of the affected software until one is available.

Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.

Is CVE-2024-5412 being exploited?

There is no known exploitation of CVE-2024-5412 in the wild and no public exploit code.

Sources

Also known as GHSA-g788-jcgm-hvqq.