CVE-2024-9197

Summary

CVE-2024-9197 is a post-authentication buffer overflow vulnerability affecting the Zyxel VMG3625-T50B's CGI program in specific firmware versions (V5.50(ABPM.9.2)C0). This issue allows authenticated attackers with administrator privileges to send a crafted HTTP GET request, leading to a temporary denial of service (DoS) condition against the web management interface. Successful exploitation of this vulnerability hinges on the function ZyEE being enabled.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.