Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-49fx-5cmv-3mw7

Опубликовано: 03 сент. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 4.9

Описание

A buffer overflow vulnerability in the CGI program of Zyxel ATP series firmware versions from V4.32 through V5.38, USG FLEX series firmware versions from V4.50 through V5.38, USG FLEX 50(W) series firmware versions from V4.16 through V5.38, and USG20(W)-VPN series firmware versions from V4.16 through V5.38 could allow an authenticated attacker with administrator privileges to cause denial of service (DoS) conditions by sending a crafted HTTP request to a vulnerable device.

A buffer overflow vulnerability in the CGI program of Zyxel ATP series firmware versions from V4.32 through V5.38, USG FLEX series firmware versions from V4.50 through V5.38, USG FLEX 50(W) series firmware versions from V4.16 through V5.38, and USG20(W)-VPN series firmware versions from V4.16 through V5.38 could allow an authenticated attacker with administrator privileges to cause denial of service (DoS) conditions by sending a crafted HTTP request to a vulnerable device.

EPSS

Процентиль: 40%
0.00185
Низкий

4.9 Medium

CVSS3

Дефекты

CWE-120

Связанные уязвимости

CVSS3: 4.9
nvd
больше 1 года назад

A buffer overflow vulnerability in the CGI program of Zyxel ATP series firmware versions from V4.32 through V5.38, USG FLEX series firmware versions from V4.50 through V5.38, USG FLEX 50(W) series firmware versions from V4.16 through V5.38, and USG20(W)-VPN series firmware versions from V4.16 through V5.38 could allow an authenticated attacker with administrator privileges to cause denial of service (DoS) conditions by sending a crafted HTTP request to a vulnerable device.

CVSS3: 4.9
fstec
больше 1 года назад

Уязвимость обработчика CGI микропрограммного обеспечения сетевых устройств Zyxel ATP, USG FLEX и USG FLEX 50(W)/USG20(W)-VPN, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 40%
0.00185
Низкий

4.9 Medium

CVSS3

Дефекты

CWE-120