Description
A null pointer dereference vulnerability in the certificate downloader CGI program of the Zyxel VMG3625-T50B firmware versions through 5.50(ABPM.9.6)C0 and the Zyxel WX3100-T0 firmware versions through 5.50(ABVL.4.8)C0 could allow an authenticated attacker with administrator privileges to trigger a denial-of-service (DoS) condition by sending a crafted HTTP request.
CVSS breakdown
CVSS 3.1
Attack Vector
Network
Attack Complexity
Low
Privileges Required
High
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High
Affected products
- Zyxel / VMG3625-T50B firmware<= 5.50(ABPM.9.6)C0 – <= 5.50(ABPM.9.6)C0
- Zyxel / WX3100-T0 firmware<= 5.50(ABVL.4.8)C0 – <= 5.50(ABVL.4.8)C0