CVE-2023-37929: Zyxel AX7501-b0 Firmware

Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days.

The buffer overflow vulnerability in the CGI program of the VMG3625-T50B firmware version V5.50(ABPM.8)C0 could allow an authenticated remote attacker to cause denial of service (DoS) conditions by sending a crafted HTTP request to a vulnerable device.

Affected products

• Zyxel AX7501-b0 Firmware: version 5.17(abpc.4)c0 only
• Zyxel AX7501-b1 Firmware: version 5.17(abpc.4)c0 only
• Zyxel DX3300-t1 Firmware: version 5.50(aby.4)c0 only
• Zyxel DX3301-t0 Firmware: version 5.50(aby.4)c0 only
• Zyxel DX4510 Firmware: version 5.17(abyl.5)c0 only
• Zyxel DX5401-b0 Firmware: version 5.17(abyo.5)c0 only
• Zyxel DX5401-b1 Firmware: version 5.17(abyo.5)c0 only
• Zyxel EMG3525-t50b Firmware: version 5.50(abpm.8)c0 only
• Zyxel EMG5523-t50b Firmware: version 5.50(abpm.8)c0 only
• Zyxel EMG5723-t50k Firmware: version 5.50(abom.8.2)c0 only
• Zyxel EX3300-t1 Firmware: version 5.50(aby.4)c0 only
• Zyxel EX3301-t0 Firmware: version 5.50(aby.4)c0 only
• Zyxel EX3500-t0 Firmware: version 5.44(achr.0)c0 only
• Zyxel EX3501-t0 Firmware: version 5.44(achr.0)c0 only
• Zyxel EX3510 Firmware: version 5.17(abup.9)c0 only
• Zyxel EX5401-b0 Firmware: version 5.17(abyo.5)c0 only
• Zyxel EX5401-b1 Firmware: version 5.17(abyo.5)c0 only
• Zyxel EX5501-b0 Firmware: version 5.17(abry.4)c0 only
• Zyxel EX5510 Firmware: version 5.17(abqx.8)c0 only
• Zyxel EX5512-t0 Firmware: version 5.70(aceg.2)c0 only
• Zyxel EX5600-t1 Firmware: version 5.70(acdz.2)c0 only
• Zyxel EX5601-t0 Firmware: version 5.70(acdz.2)c0 only
• Zyxel EX5601-t1 Firmware: version 5.70(acdz.2)c0 only
• Zyxel EX7710-b0 Firmware: version 5.18(acak.0)c0 only
• Zyxel NBG7510 Firmware: version 1.00(abzy.5)c0 only
• and 7 more

Published 2024-05-21. Last modified 2026-06-17.