Description
A post-authentication buffer overflow vulnerability in the parameter "action" of the CGI program in Zyxel VMG3625-T50B firmware versions through V5.50(ABPM.9.2)C0 could allow an authenticated attacker with administrator privileges to cause a temporary denial of service (DoS) condition against the web management interface by sending a crafted HTTP GET request to a vulnerable device if the function ZyEE is enabled.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Zyxel | VMG3625-T50B firmware | <= V5.50(ABPM.9.2)C0 | — |