Strix
26.1K

CVE-2022-26414

MEDIUMCVSS 5.5/10EPSS 0.20%

Last modified

CVE-2022-26414 is a medium-severity vulnerability rated 5.5/10 on the CVSS scale. A potential buffer overflow vulnerability was identified in some internal functions of Zyxel VMG3312-T20A firmware version 5.30(ABFX.5)C0, which could be exploited by a local authenticated attacker to cause a denial of service.. EPSS estimates a 0.20% chance of exploitation in the next 30 days.

Description

A potential buffer overflow vulnerability was identified in some internal functions of Zyxel VMG3312-T20A firmware version 5.30(ABFX.5)C0, which could be exploited by a local authenticated attacker to cause a denial of service.

Metrics

CVSS 3.1
5.5/10

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS Probability
0.20%

10.0th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

VendorProductVersions
ZyxelVmg3312-T20a Firmware5.30\(abfx.5\)c0
ZyxelEmg3525-T50b Firmware< 5.50\(abpm.6\)c0
ZyxelEmg5523-T50b Firmware< 5.50\(abpm.6\)c0
ZyxelEmg5723-T50k Firmware< 5.50\(abom.7\)c0
ZyxelEmg6726-B10a Firmware< 5.13\(abnp.7\)c0
ZyxelVmg1312-T20b Firmware< 5.50\(absb.5\)c0
ZyxelVmg3625-T50b Firmware< 5.50\(abpm.6\)c0
ZyxelVmg3927-B50a Firmware< 5.17\(abmt.6\)c0
ZyxelVmg3927-B50b Firmware< 5.13\(ably.7\)c0
ZyxelVmg3927-B60a Firmware< 5.17\(abmt.6\)c0
ZyxelVmg3927-T50k Firmware< 5.50\(abom.7\)c0
ZyxelVmg4927-B50a Firmware< 5.13\(ably.7\)c0
ZyxelVmg8623-T50b Firmware< 5.50\(abpm.6\)c0
ZyxelVmg8825-B50a Firmware< 5.17\(abmt.6\)c0
ZyxelVmg8825-B50b Firmware< 5.17\(abny.7\)c0
ZyxelVmg8825-T50k Firmware< 5.50\(abom.7\)c0
ZyxelVmg8825-B60a Firmware< 5.17\(abmt.6\)c0
ZyxelVmg8825-B60b Firmware< 5.17\(abny.7\)c0
ZyxelXmg3927-B50a Firmware< 5.17\(abmt.6\)c0
ZyxelXmg8825-B50a Firmware< 5.17\(abmt.6\)c0
ZyxelDx5401-B0 Firmware< 5.17\(abyo.1\)c0
ZyxelEx3510-B0 Firmware< 5.17\(abup.4\)c1
ZyxelEx5401-B0 Firmware< 5.17\(abyo.1\)c0
ZyxelEx5501-B0 Firmware< 5.17\(abry.2\)c0
ZyxelAx7501-B0 Firmware< 5.17\(abpc.1\)c0
ZyxelEp240p Firmware< 5.40\(abh.0\)c0
ZyxelPm7300-T0 Firmware< 5.42\(acbc.1\)c0
ZyxelPmg5317-T20b Firmware< 5.40\(abki.4\)c0
ZyxelPmg5617ga Firmware< 5.40\(abna.2\)c0
ZyxelPmg5617-T20b2 Firmware< 5.41\(acbb.1\)c0
ZyxelPmg5622ga Firmware< 5.40\(abnb.2\)c0
ZyxelPx7501-B0 Firmware< 5.17\(abpc.1\)c0

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2022-26414?
A potential buffer overflow vulnerability was identified in some internal functions of Zyxel VMG3312-T20A firmware version 5.30(ABFX.5)C0, which could be exploited by a local authenticated attacker to cause a denial of service.
How severe is CVE-2022-26414?
CVE-2022-26414 has a CVSS score of 5.5/10 (MEDIUM severity). The EPSS model estimates a 0.20% probability of exploitation in the next 30 days.
How do I fix CVE-2022-26414?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2022-26414?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST