Zyxel SCR50AXE Firmware vulnerabilities

5 CVEs affecting Zyxel SCR50AXE Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-38269, published 2024-09-24.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2024-5412, published 2024-09-03. High severity, CVSS 7.5. EPSS: 0.7% chance of exploitation in the next 30 days. A buffer overflow vulnerability in the library "libclinkc" of the Zyxel VMG8825-T50K firmware version 5.50(ABOM.8)C0 could allow an unauthenticated attacker to cause denial of service (DoS)…
CVE-2024-38269, published 2024-09-24. Medium severity, CVSS 4.9. EPSS: 0.4% chance of exploitation in the next 30 days. An improper restriction of operations within the bounds of a memory buffer in the USB file-sharing handler of the Zyxel VMG8825-T50K firmware versions through 5.50(ABOM.8)C0 could allow an…
CVE-2024-38268, published 2024-09-24. Medium severity, CVSS 4.9. EPSS: 0.4% chance of exploitation in the next 30 days. An improper restriction of operations within the bounds of a memory buffer in the MAC address parser of the Zyxel VMG8825-T50K firmware versions through 5.50(ABOM.8)C0 could allow an authenticated…
CVE-2024-38267, published 2024-09-24. Medium severity, CVSS 4.9. EPSS: 0.4% chance of exploitation in the next 30 days. An improper restriction of operations within the bounds of a memory buffer in the IPv6 address parser of the Zyxel VMG8825-T50K firmware versions through 5.50(ABOM.8)C0 could allow an authenticated…
CVE-2024-38266, published 2024-09-24. Medium severity, CVSS 4.9. EPSS: 0.4% chance of exploitation in the next 30 days. An improper restriction of operations within the bounds of a memory buffer in the parameter type parser of the Zyxel VMG8825-T50K firmware versions through 5.50(ABOM.8)C0 could allow an authenticated…