Zyxel NBG7510 Firmware vulnerabilities

3 CVEs affecting Zyxel NBG7510 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-0816, published 2024-05-21.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2022-38546, published 2022-12-21. Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days. A DNS misconfiguration was found in Zyxel NBG7510 firmware versions prior to V1.00(ABZY.3)C0, which could allow an unauthenticated attacker to access the DNS server when the device is switched to the…
CVE-2023-37929, published 2024-05-21. Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days. The buffer overflow vulnerability in the CGI program of the VMG3625-T50B firmware version V5.50(ABPM.8)C0 could allow an authenticated remote attacker to cause denial of service (DoS) conditions by…
CVE-2024-0816, published 2024-05-21. Medium severity, CVSS 5.5. EPSS: 0.1% chance of exploitation in the next 30 days. The buffer overflow vulnerability in the DX3300-T1 firmware version V5.50(ABVY.4)C0 could allow an authenticated local attacker to cause denial of service (DoS) conditions by executing the CLI…