CVE-2023-37929

mediumpriority · track · 0EPSS 0.005 · 46 %ileEUUS

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

0.55% (46th) EPSS

CVSS 6.5 · medium

Is it mine?

33 products

Check your exposure

Who says so?

3 sources

cnnvd · enisa_euvd · nvd

EPSS · scored 2026-10-27

The buffer overflow vulnerability in the CGI program of the VMG3625-T50B firmware version V5.50(ABPM.8)C0 could allow an authenticated remote attacker to cause denial of service (DoS) conditions by sending a crafted HTTP request to a vulnerable device.

cvss

Technical severity, 0–10. One row per scoring source.

6.5

010

base score 0–10 · higher = more severe · hover a vector to decode

v3.16.5mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:Hsecondary · ENISA EU

v3.16.5mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:Hsecondary · security@zyxel.com.twexploitability 2.8 · impact 3.6

v3.16mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:Usecondary · CVSS-BT (t0sche)

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Trackcoordinatorcisa_ssvcUS

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-120US

affected products (33)

Products and version ranges known to be affected.

Zyxel V5.50(ABPM.8)C0 firmware≤ V5.50(ABPM.8)C0enisa_euvdEU
zyxel ax7501-b0 firmware= 5.17(abpc.4)c0nvdUScpe:2.3:o:zyxel:ax7501-b0_firmware:*:*:*:*:*:*:*:*
zyxel ax7501-b1 firmware= 5.17(abpc.4)c0nvdUScpe:2.3:o:zyxel:ax7501-b1_firmware:*:*:*:*:*:*:*:*
zyxel dx3300-t1 firmware= 5.50(aby.4)c0nvdUScpe:2.3:o:zyxel:dx3300-t1_firmware:*:*:*:*:*:*:*:*
zyxel dx3301-t0 firmware= 5.50(aby.4)c0nvdUScpe:2.3:o:zyxel:dx3301-t0_firmware:*:*:*:*:*:*:*:*
zyxel dx4510 firmware= 5.17(abyl.5)c0nvdUScpe:2.3:o:zyxel:dx4510_firmware:*:*:*:*:*:*:*:*
zyxel dx5401-b0 firmware= 5.17(abyo.5)c0nvdUScpe:2.3:o:zyxel:dx5401-b0_firmware:*:*:*:*:*:*:*:*
zyxel dx5401-b1 firmware= 5.17(abyo.5)c0nvdUScpe:2.3:o:zyxel:dx5401-b1_firmware:*:*:*:*:*:*:*:*
zyxel emg3525-t50b firmware= 5.50(abpm.8)c0nvdUScpe:2.3:o:zyxel:emg3525-t50b_firmware:*:*:*:*:*:*:*:*
zyxel emg5523-t50b firmware= 5.50(abpm.8)c0nvdUScpe:2.3:o:zyxel:emg5523-t50b_firmware:*:*:*:*:*:*:*:*
zyxel emg5723-t50k firmware= 5.50(abom.8.2)c0nvdUScpe:2.3:o:zyxel:emg5723-t50k_firmware:*:*:*:*:*:*:*:*
zyxel ex3300-t1 firmware= 5.50(aby.4)c0nvdUScpe:2.3:o:zyxel:ex3300-t1_firmware:*:*:*:*:*:*:*:*
zyxel ex3301-t0 firmware= 5.50(aby.4)c0nvdUScpe:2.3:o:zyxel:ex3301-t0_firmware:*:*:*:*:*:*:*:*
zyxel ex3500-t0 firmware= 5.44(achr.0)c0nvdUScpe:2.3:o:zyxel:ex3500-t0_firmware:*:*:*:*:*:*:*:*
zyxel ex3501-t0 firmware= 5.44(achr.0)c0nvdUScpe:2.3:o:zyxel:ex3501-t0_firmware:*:*:*:*:*:*:*:*
zyxel ex3510 firmware= 5.17(abup.9)c0nvdUScpe:2.3:o:zyxel:ex3510_firmware:*:*:*:*:*:*:*:*
zyxel ex5401-b0 firmware= 5.17(abyo.5)c0nvdUScpe:2.3:o:zyxel:ex5401-b0_firmware:*:*:*:*:*:*:*:*
zyxel ex5401-b1 firmware= 5.17(abyo.5)c0nvdUScpe:2.3:o:zyxel:ex5401-b1_firmware:*:*:*:*:*:*:*:*
zyxel ex5501-b0 firmware= 5.17(abry.4)c0nvdUScpe:2.3:o:zyxel:ex5501-b0_firmware:*:*:*:*:*:*:*:*
zyxel ex5510 firmware= 5.17(abqx.8)c0nvdUScpe:2.3:o:zyxel:ex5510_firmware:*:*:*:*:*:*:*:*

showing 20 of 33

also known as (3)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd nvd NVD CVE.org MITRE

published 2024-05-21modified 2026-06-17

references (4)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan