Zyxel VMG4005-B50B UPnP Buffer Overflow Vulnerability Leading to Denial-of-Service

A buffer overflow vulnerability has been identified in the UPnP DeletePortMapping() command of the Zyxel VMG4005-B50B router. This vulnerability affects firmware versions through 5.13(ABRL.5.4)C0. An adjacent attacker could exploit this vulnerability to cause a temporary denial-of-service condition, disrupting the UPnP functionality of the device. The issue can only be exploited within a LAN or WLAN environment.

Impact

Exploitation of this vulnerability causes a temporary denial-of-service condition, disrupting the UPnP functionality of the affected device.

Remediation

Users can upgrade to Zyxel firmware version 5.13(ABRL.5.5)C0 to address this vulnerability. For devices acquired through an ISP, contact the ISP's support team. For other users, reach out to the local Zyxel support team or visit Zyxel's Community for assistance.