Zyxel Nbg7510 Firmware vulnerabilities

3 known vulnerabilities affecting zyxel/nbg7510_firmware.

Total CVEs

3

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

CRITICAL1MEDIUM2

Vulnerabilities

Page 1 of 1

CVE-2024-0816MEDIUMCVSS 5.5v1.00\(abzy.6\)c02024-05-21

CVE-2024-0816 [MEDIUM] CWE-120 CVE-2024-0816: The buffer overflow vulnerability in the DX3300-T1 firmware version V5.50(ABVY.4)C0 could allow an a The buffer overflow vulnerability in the DX3300-T1 firmware version V5.50(ABVY.4)C0 could allow an authenticated local attacker to cause denial of service (DoS) conditions by executing the CLI command with crafted strings on an affected device.

CVE-2023-37929MEDIUMCVSS 6.5v1.00\(abzy.5\)c02024-05-21

CVE-2023-37929 [MEDIUM] CWE-120 CVE-2023-37929: The buffer overflow vulnerability in the CGI program of the VMG3625-T50B firmware version V5.50(ABPM The buffer overflow vulnerability in the CGI program of the VMG3625-T50B firmware version V5.50(ABPM.8)C0 could allow an authenticated remote attacker to cause denial of service (DoS) conditions by sending a crafted HTTP request to a vulnerable device.

CVE-2022-38546CRITICALCVSS 9.8≤ 1.00\(abzy.2\)c0fixed in V1.00(ABZY.3)C02022-12-21

CVE-2022-38546 [MEDIUM] CWE-284 CVE-2022-38546: A DNS misconfiguration was found in Zyxel NBG7510 firmware versions prior to V1.00(ABZY.3)C0, which A DNS misconfiguration was found in Zyxel NBG7510 firmware versions prior to V1.00(ABZY.3)C0, which could allow an unauthenticated attacker to access the DNS server when the device is switched to the AP mode.