Medium severity · published May 21, 2024
CVE-2024-0816
The buffer overflow vulnerability in the DX3300-T1 firmware version V5.50(ABVY.4)C0 could allow an authenticated local attacker to cause denial of service (DoS) conditions by…
5.5
CVSS
0.1%
EPSS
No
On KEV
Description
The buffer overflow vulnerability in the DX3300-T1 firmware version V5.50(ABVY.4)C0 could allow an authenticated local attacker to cause denial of service (DoS) conditions by executing the CLI command with crafted strings on an affected device.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.1% · higher than 4% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DF
DX3300-T1 firmware · Zyxel
V5.50(ABVY.4)C0 · source: vendor, NVD
AF
Ax7501-b0 Firmware · Zyxel
5.17(abpc.4)c0 · source: NVD
AF
Ax7501-b1 Firmware · Zyxel
5.17(abpc.4)c0 · source: NVD
DF
Dx3301-t0 Firmware · Zyxel
5.50(aby.4)c0 · source: NVD
DF
Dx4510 Firmware · Zyxel
5.17(abyl.6)c0 · source: NVD
DF
Dx5401-b0 Firmware · Zyxel
5.17(abyo.5)c0 · source: NVD
DF
Dx5401-b1 Firmware · Zyxel
5.17(abyo.5)c0 · source: NVD
EF
Emg3525-t50b Firmware · Zyxel
5.50(abpm.8)c0 · source: NVD
EF
Emg5523-t50b Firmware · Zyxel
5.50(abpm.8)c0 · source: NVD
EF
Emg5723-t50k Firmware · Zyxel
5.50(abom.8.2)c0 · source: NVD
EF
Ex3300-t1 Firmware · Zyxel
5.50(aby.4)c0 · source: NVD
EF
Ex3301-t0 Firmware · Zyxel
5.50(aby.4)c0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-0816
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-0816
Vendor Advisory
https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-buffer-overflow-vulnerabilities-in-some-5g-nr-4g-lte-cpe-dsl-ethernet-cpe-fiber-ont-wifi-extender-and-home-router-devices-05-21-2024
More from DX3300-T1 firmware
8.8
CVE-2025-13943
A post-authentication command injection vulnerability in the log file download function of the Zyxel EX3301-T0 firmware versions through 5.50(ABVY.7)C0 could allow an…
8.8
CVE-2025-8693
A post-authentication command injection vulnerability in the "priv" parameter of Zyxel DX3300-T0 firmware version 5.50(ABVY.6.3)C0 and earlier could allow an authenticated…
7.5
CVE-2025-6599
An uncontrolled resource consumption vulnerability in the web server of Zyxel DX3301-T0 firmware version 5.50(ABVY.6.3)C0 and earlier could allow an attacker to perform…
7.5
CVE-2024-8748
A buffer overflow vulnerability in the packet parser of the third-party library "libclinkc" in Zyxel VMG8825-T50K firmware versions through V5.50(ABOM.8.4)C0 could allow an…
7.5
CVE-2024-5412
A buffer overflow vulnerability in the library "libclinkc" of the Zyxel VMG8825-T50K firmware version 5.50(ABOM.8)C0 could allow an unauthenticated attacker to cause denial of…