Medium severity4.9NVD Advisory· Published Dec 3, 2024· Updated Jun 17, 2026
CVE-2024-9197
CVE-2024-9197
Description
A post-authentication buffer overflow vulnerability in the parameter "action" of the CGI program in Zyxel VMG3625-T50B firmware versions through V5.50(ABPM.9.2)C0 could allow an authenticated attacker with administrator privileges to cause a temporary denial of service (DoS) condition against the web management interface by sending a crafted HTTP GET request to a vulnerable device if the function ZyEE is enabled.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
38- cpe:2.3:o:zyxel:ax7501-b0_firmware:*:*:*:*:*:*:*:*Range: <5.17\(abpc.5.3\)c0
- cpe:2.3:o:zyxel:ax7501-b1_firmware:*:*:*:*:*:*:*:*Range: <5.17\(abpc.5.3\)c0
- cpe:2.3:o:zyxel:dx5401-b0_firmware:*:*:*:*:*:*:*:*Range: <5.17\(abyo.6.4\)c0
- cpe:2.3:o:zyxel:dx5401-b1_firmware:*:*:*:*:*:*:*:*Range: <5.17\(abyo.6.4\)c0
- cpe:2.3:o:zyxel:emg3525-t50b_firmware:*:*:*:*:*:*:*:*Range: <5.50\(abpm.9.3\)c0
- cpe:2.3:o:zyxel:emg5523-t50b_firmware:*:*:*:*:*:*:*:*Range: <5.50\(abpm.9.3\)c0
- cpe:2.3:o:zyxel:emg5723-t50k_firmware:*:*:*:*:*:*:*:*Range: <5.50\(abom.8.5\)c0
- cpe:2.3:o:zyxel:ex3600-t0_firmware:*:*:*:*:*:*:*:*Range: <5.70\(acif.0.4\)c0
- cpe:2.3:o:zyxel:ex5401-b0_firmware:*:*:*:*:*:*:*:*Range: <5.17\(abyo.6.4\)c0
- cpe:2.3:o:zyxel:ex5401-b1_firmware:*:*:*:*:*:*:*:*Range: <5.17\(abyo.6.4\)c0
- cpe:2.3:o:zyxel:ex5501-b0_firmware:*:*:*:*:*:*:*:*Range: <5.17\(abry.5.3\)c0
- cpe:2.3:o:zyxel:ex5600-t1_firmware:*:*:*:*:*:*:*:*Range: <5.70\(acdz.3.4\)c0
- cpe:2.3:o:zyxel:ex5601-t0_firmware:*:*:*:*:*:*:*:*Range: <5.70\(acdz.3.4\)c0
- cpe:2.3:o:zyxel:ex5601-t1_firmware:*:*:*:*:*:*:*:*Range: <5.70\(acdz.3.4\)c0
- cpe:2.3:o:zyxel:ex7501-b0_firmware:*:*:*:*:*:*:*:*Range: <5.18\(achn.1.3\)c0
- cpe:2.3:o:zyxel:px3321-t1_firmware:*:*:*:*:*:*:*:*Range: <5.44\(acjb.1.1\)c0
- cpe:2.3:o:zyxel:px5301-t0_firmware:*:*:*:*:*:*:*:*Range: <5.44\(ackb.0.1\)c0
- cpe:2.3:o:zyxel:vmg3625-t50b_firmware:*:*:*:*:*:*:*:*Range: <5.50\(abpm.9.3\)c0
- cpe:2.3:o:zyxel:vmg3927-t50k_firmware:*:*:*:*:*:*:*:*Range: <5.50\(abom.8.5\)c0
- cpe:2.3:o:zyxel:vmg8623-t50b_firmware:*:*:*:*:*:*:*:*Range: <5.50\(abpm.9.3\)c0
- cpe:2.3:o:zyxel:vmg8825-t50k_firmware:*:*:*:*:*:*:*:*Range: <5.50\(abom.8.5\)c0
- cpe:2.3:o:zyxel:wx5600-t0_firmware:*:*:*:*:*:*:*:*Range: <5.70\(aceb.3.3\)c0
<=V5.50(ABPM.9.2)C0+ 1 more
- (no CPE)range: <=V5.50(ABPM.9.2)C0
- (no CPE)range: <= V5.50(ABPM.9.2)C0
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.