CVE-2024-42058

CVSS V2 None CVSS V3 None

Description

A null pointer dereference vulnerability in Zyxel ATP series firmware versions from V4.32 through V5.38, USG FLEX series firmware versions from V4.50 through V5.38, USG FLEX 50(W) series firmware versions from V5.20 through V5.38, and USG20(W)-VPN series firmware versions from V5.20 through V5.38 could allow an unauthenticated attacker to cause DoS conditions by sending crafted packets to a vulnerable device.

Overview

CVE ID
CVE-2024-42058

Assigner
Zyxel

Vulnerability Status
PUBLISHED

Published Version
2024-09-03T01:47:29.258Z

Last Modified Date
2024-09-03T01:47:29.258Z

Weakness Enumerations

CWE	URL
CWE-476	http://cwe.mitre.org/data/definitions/476.html

References

Reference URL	Reference Tags
https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-multiple-vulnerabilities-in-firewalls-09-03-2024	vendor-advisory

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2024-42058
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42058

History

Created	Old Value	New Value	Data Type	Notes
2024-09-03 13:09:31				Added to TrackCVE