CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 4.9. Exploitation may require the attacker to be authenticated. It may lead to a denial-of-service condition.
CVE
CVE-2024-9197
Severity
MEDIUM
CVSS
4.9
EPSS
0.49%
Original NVD Description
A post-authentication buffer overflow vulnerability in the parameter "action" of the CGI program in Zyxel VMG3625-T50B firmware versions through V5.50(ABPM.9.2)C0 could allow an authenticated attacker with administrator privileges to cause a temporary denial of service (DoS) condition against the web management interface by sending a crafted HTTP GET request to a vulnerable device if the function ZyEE is enabled.
Related CVEs
Other vulnerabilities affecting the same vendor(s)