What is the CVSS score of CVE-2024-5412?

CVE-2024-5412 has a CVSS 3.1 base score of 7.5 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H. EPSS exploitation probability: 0.7%.

Nebula Lte3301 Plus Firmware CVE-2024-5412

HIGH

Classic Buffer Overflow (CWE-120)

2024-09-03 security@zyxel.com.tw

Zyxel Buffer Overflow Denial Of Service Nebula Lte3301 Plus Firmware Nebula Fwa505 Firmware Nebula Fwa710 Firmware Nebula Fwa510 Firmware Wx5600 T0 Firmware Wx3401 B0 Firmware Wx3100 T0 Firmware Scr50Axe Firmware Px3321 T1 Firmware Pm7300 T0 Firmware Pm5100 T0 Firmware Pm3100 T0 Firmware Ax7501 B1 Firmware Ax7501 B0 Firmware Vmg8825 T50K Firmware Vmg8623 T50b Firmware Vmg4005 B60a Firmware Vmg4005 B50a Firmware Vmg3927 T50K Firmware Vmg3625 T50b Firmware Emg5723 T50K Firmware Emg5523 T50b Firmware Emg3525 T50b Firmware Ex7710 B0 Firmware Ex7501 B0 Firmware Ex5601 T1 Firmware Ex5601 T0 Firmware Ex5512 T0 Firmware Ex5510 B0 Firmware Ex5401 B1 Firmware Ex5401 B0 Firmware Ex3510 B0 Firmware Ex3501 T0 Firmware Ex3500 T0 Firmware Ex3301 T0 Firmware Ex3300 T1 Firmware Ex3300 T0 Firmware Dx5401 B1 Firmware Dx5401 B0 Firmware Dx4510 B0 Firmware Dx3301 T0 Firmware Dx3300 T1 Firmware Dx3300 T0 Firmware Nr7501 Firmware Nr7303 Firmware Nr7302 Firmware Nr7103 Firmware Nr5307 Firmware Nr5103Ev2 Firmware Nr5103 Firmware

7.5

CVSS 3.1 · Vendor: zyxel

Severity by source

Vendor (zyxel) PRIMARY

7.5 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Primary rating from Vendor (zyxel) · only source for this CVE.

CVSS VectorVendor: zyxel

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Lifecycle Timeline

CVE Published

Sep 03, 2024 - 02:15 cve.org

HIGH 7.5

DescriptionCVE.org

A buffer overflow vulnerability in the library "libclinkc" of the Zyxel VMG8825-T50K firmware version 5.50(ABOM.8)C0 could allow an unauthenticated attacker to cause denial of service (DoS) conditions by sending a crafted HTTP request to a vulnerable device.

AnalysisAI

A buffer overflow vulnerability in the library "libclinkc" of the Zyxel VMG8825-T50K firmware version 5.50(ABOM.8)C0 could allow an unauthenticated attacker to cause denial of service (DoS). Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified as Buffer Copy without Size Check (CWE-120), which allows attackers to overflow a buffer to corrupt adjacent memory. A buffer overflow vulnerability in the library "libclinkc" of the Zyxel VMG8825-T50K firmware version 5.50(ABOM.8)C0 could allow an unauthenticated attacker to cause denial of service (DoS) conditions by sending a crafted HTTP request to a vulnerable device. Affected products include: Zyxel Nebula Lte3301-Plus Firmware, Zyxel Nebula Fwa505 Firmware, Zyxel Nebula Fwa710 Firmware, Zyxel Nebula Fwa510 Firmware, Zyxel Wx5600-T0 Firmware. Version information: version 5.50.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Always validate buffer sizes before copy operations. Use bounded functions (strncpy, snprintf). Enable compiler protections.