Zyxel Vmg8623 T50B vulnerabilities, page 2
28 vulnerabilities
Known vulnerabilities in Zyxel Vmg8623 T50B, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2024-5412zyxelax7501-b0_firmware+50
EPSS score0.66%
A buffer overflow vulnerability in the library "libclinkc" of the Zyxel VMG8825-T50K firmware version 5.50(ABOM.8)C0 could allow an unauthenticated attacker to cause denial of service (DoS) conditions by sending a crafted HTTP request to a vulnerable device.CVE-2024-12009zyxelax7501-b0_firmware+38EPSS score1.08%
A post-authentication command injection vulnerability in the "ZyEE" function of the Zyxel EX5601-T1 firmware version V5.70(ACDZ.3.6)C0 and earlier could allow an authenticated attacker with administrator privileges to execute operating system (OS) commands on a vulnerable device.CVE-2024-12010zyxelax7501-b0_firmware+41EPSS score1.08%
A post-authentication command injection vulnerability in the ”zyUtilMailSend” function of the Zyxel AX7501-B1 firmware version V5.17(ABPC.5.3)C0 and earlier could allow an authenticated attacker with administrator privileges to execute operating system (OS) commands on a vulnerable device.CVE-2024-8748zyxelax7501-b0_firmware+63EPSS score0.52%
A buffer overflow vulnerability in the packet parser of the third-party library "libclinkc" in Zyxel VMG8825-T50K firmware versions through V5.50(ABOM.8.4)C0 could allow an attacker to cause a temporary denial of service (DoS) condition against the web management interface by sending a crafted HTTP POST request to a vulnerable device.CVE-2026-1459zyxeldx5401-b1_firmware+6EPSS score0.92%
A post-authentication command injection vulnerability in the TR-369 certificate download CGI program of the Zyxel VMG3625-T50B firmware versions through 5.50(ABPM.9.7)C0 could allow an authenticated attacker with administrator privileges to execute operating system (OS) commands on an affected device.CVE-2026-1460zyxelam7510-00_firmware+46EPSS score1.16%
A post-authentication command injection vulnerability in the “DomainName” parameter of the DHCP configuration file in Zyxel DX3301-T0 and EX3301-T0 firmware versions through 5.50(ABVY.7.1)C0 could allow an authenticated attacker with administrator privileges to execute OS commands on an affected device.CVE-2026-0711zyxelax7501-b0_firmware+36EPSS score0.85%
A post-authentication command injection vulnerability in the EasyMesh-related APIs of Zyxel DX3300-T0 firmware versions through 5.50(ABVY.7.1)C0 could allow an authenticated, adjacent attacker with administrator privileges to execute OS commands on an affected device.CVE-2023-37929zyxelax7501-b0_firmware+32EPSS score0.55%
The buffer overflow vulnerability in the CGI program of the VMG3625-T50B firmware version V5.50(ABPM.8)C0 could allow an authenticated remote attacker to cause denial of service (DoS) conditions by sending a crafted HTTP request to a vulnerable device.