CVE-2024-0816
The buffer overflow vulnerability in the DX3300-T1 firmware version V5.50(ABVY.4)C0 could allow...
The buffer overflow vulnerability in the DX3300-T1 firmware version V5.50(ABVY.4)C0 could allow an authenticated local attacker to cause denial of service (DoS) conditions by executing the CLI command with crafted strings on an affected device.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
The buffer overflow vulnerability in the DX3300-T1 firmware version V5.50(ABVY.4)C0 could allow an authenticated local attacker to cause denial of service (DoS) conditions by executing the CLI command with crafted strings on an affected device.
- Record
CVE-2024-0816- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-120
- Updated
- 2026-11-02
EUVDEUVD-2024-16602
The buffer overflow vulnerability in the DX3300-T1 firmware version V5.50(ABVY.4)C0 could allow an authenticated local attacker to cause denial of service (DoS) conditions by executing the CLI command with crafted strings on an affected device.
- Record
EUVD-2024-16602- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-rxw4-5vgr-mq26
The buffer overflow vulnerability in the DX3300-T1 firmware version V5.50(ABVY.4)C0 could allow...
The buffer overflow vulnerability in the DX3300-T1 firmware version V5.50(ABVY.4)C0 could allow an authenticated local attacker to cause denial of service (DoS) conditions by executing the CLI command with crafted strings on an affected device.
- Record
GHSA-rxw4-5vgr-mq26- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-120
- Updated
- 2026-11-02
NVD
The buffer overflow vulnerability in the DX3300-T1 firmware version V5.50(ABVY.4)C0 could allow an authenticated local attacker to cause denial of service (DoS) conditions by executing the CLI command with crafted strings on an affected device.
- Record
CVE-2024-0816- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-120
- Updated
- 2026-11-02
Affected products
- zyxel dx3300-t1 firmware
- zyxel ax7501-b0 firmware
- zyxel ax7501-b1 firmware
- zyxel dx3301-t0 firmware
- zyxel dx4510 firmware
- zyxel dx5401-b0 firmware
- zyxel dx5401-b1 firmware
- zyxel emg3525-t50b firmware
- zyxel emg5523-t50b firmware
- zyxel emg5723-t50k firmware
- zyxel ex3300-t1 firmware
- zyxel ex3301-t0 firmware
Show 53 moreShow less
- zyxel ex3320-t0 firmware
- zyxel ex3320-t1 firmware
- zyxel ex3500-t0 firmware
- zyxel ex3501-t0 firmware
- zyxel ex3510 firmware
- zyxel ex5401-b0 firmware
- zyxel ex5401-b1 firmware
- zyxel ex5501-b0 firmware
- zyxel ex5510 firmware
- zyxel ex5512-t0 firmware
- zyxel ex5600-t1 firmware
- zyxel ex5601-t0 firmware
- zyxel ex5601-t1 firmware
- zyxel ex7710-b0 firmware
- zyxel lte3202-m437 firmware
- zyxel lte3301-plus firmware
- zyxel lte5388-m804 firmware
- zyxel lte5398-m904 firmware
- zyxel lte7240-m403 firmware
- zyxel lte7480-m804 firmware
- zyxel lte7490-m904 firmware
- zyxel nbg7510 firmware
- zyxel nebula fwa505 firmware
- zyxel nebula fwa510 firmware
- zyxel nebula fwa710 firmware
- zyxel nebula lte3301-plus firmware
- zyxel nebula lte7461-m602 firmware
- zyxel nebula nr5101 firmware
- zyxel nebula nr7101 firmware
- zyxel nr5103 firmware
- zyxel nr5103e firmware
- zyxel nr5103ev2 firmware
- zyxel nr5307 firmware
- zyxel nr7101 firmware
- zyxel nr7102 firmware
- zyxel nr7103 firmware
- zyxel nr7302 firmware
- zyxel nr7303 firmware
- zyxel nr7501 firmware
- zyxel pm3100-t0 firmware
- zyxel pm5100-t0 firmware
- zyxel pm7300-t0 firmware
- zyxel px3321-t1 firmware
- zyxel vmg3625-t50b firmware
- zyxel vmg3927-t50k firmware
- zyxel vmg4005-b50a firmware
- zyxel vmg4005-b60a firmware
- zyxel vmg8623-t50b firmware
- zyxel vmg8825-t50k firmware
- zyxel wx3100-t0 firmware
- zyxel wx3401-b0 firmware
- zyxel wx5600-t0 firmware
- zyxel wx5610-b0 firmware
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases, published | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2024-0816 is a medium vulnerability (CVSS 5.5) in Zyxel Dx3300-t1 Firmware, published May 21, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.14%, the 3rd percentile. No source names a fixed version.