CVE-2023-37929: zyxel dx3300-t1 firmware +31 lainnya

csirt@kutim:~/threat-intel/cve/CVE-2023-37929

CVSS 6.5 · Medium EPSS 0,55%

Kerentanan Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') pada zyxel dx3300-t1 firmware, zyxel dx3301-t0 firmware +30 lainnya. Skor CVSS 3.1 6.5 (Medium) menurut zyxel.com.tw.

Deskripsi (NVD)

The buffer overflow vulnerability in the CGI program of the VMG3625-T50B firmware version V5.50(ABPM.8)C0 could allow an authenticated remote attacker to cause denial of service (DoS) conditions by sending a crafted HTTP request to a vulnerable device.

Rincian

Terbit di NVD: 21 Mei 2024
Terakhir diubah: 17 Juni 2026
Status NVD: Analyzed
CVSS 3.1: 6.5 (Medium), sumber zyxel.com.tw
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator
Jenis kelemahan (CWE): CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
EPSS (30 hari): 0,55% peluang dieksploitasi; lebih tinggi dari 44,2% CVE lain

Produk dan versi terdampak

Vendor	Produk	Versi terdampak
zyxel	dx3300-t1 firmware	Versi 5.50(aby.4)c0
zyxel	dx3301-t0 firmware	Versi 5.50(aby.4)c0
zyxel	dx4510 firmware	Versi 5.17(abyl.5)c0
zyxel	dx5401-b0 firmware	Versi 5.17(abyo.5)c0
zyxel	dx5401-b1 firmware	Versi 5.17(abyo.5)c0
zyxel	emg3525-t50b firmware	Versi 5.50(abpm.8)c0
zyxel	emg5523-t50b firmware	Versi 5.50(abpm.8)c0
zyxel	emg5723-t50k firmware	Versi 5.50(abom.8.2)c0
zyxel	ex3300-t1 firmware	Versi 5.50(aby.4)c0
zyxel	ex3301-t0 firmware	Versi 5.50(aby.4)c0
zyxel	ex3500-t0 firmware	Versi 5.44(achr.0)c0
zyxel	ex3501-t0 firmware	Versi 5.44(achr.0)c0
zyxel	ex3510 firmware	Versi 5.17(abup.9)c0
zyxel	ex5401-b0 firmware	Versi 5.17(abyo.5)c0
zyxel	ex5401-b1 firmware	Versi 5.17(abyo.5)c0
zyxel	ex5501-b0 firmware	Versi 5.17(abry.4)c0
zyxel	ex5510 firmware	Versi 5.17(abqx.8)c0
zyxel	ex5512-t0 firmware	Versi 5.70(aceg.2)c0
zyxel	ex5600-t1 firmware	Versi 5.70(acdz.2)c0
zyxel	ex5601-t0 firmware	Versi 5.70(acdz.2)c0
zyxel	ex5601-t1 firmware	Versi 5.70(acdz.2)c0
zyxel	ex7710-b0 firmware	Versi 5.18(acak.0)c0
zyxel	vmg3625-t50b firmware	Versi 5.50(abpm.8)c0
zyxel	vmg3927-t50k firmware	Versi 5.50(abom.8.2)c0
zyxel	vmg8623-t50b firmware	Versi 5.50(abpm.8)c0
zyxel	vmg8825-t50k firmware	Versi 5.50(abom.8.2)c0
zyxel	ax7501-b0 firmware	Versi 5.17(abpc.4)c0
zyxel	ax7501-b1 firmware	Versi 5.17(abpc.4)c0
zyxel	wx3100-t0 firmware	Versi 5.50(abl.3)c0
zyxel	wx5600-t0 firmware	Versi 5.70(aceb.2)c0
zyxel	wx5610-b0 firmware	Versi 5.18(acgj.0)c0
zyxel	nbg7510 firmware	Versi 1.00(abzy.5)c0

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-buffer-overflow-vulner... advisory vendor

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.