medium4.9
CVE-2025-11846
A null pointer dereference vulnerability in the account settings CGI program of the Zyxel VMG3625-T50B firmware versions through 5.50(ABPM.9.6)C0 and the Zyxel…
Impact
A null pointer dereference vulnerability in the account settings CGI program of the Zyxel VMG3625-T50B firmware versions through 5.50(ABPM.9.6)C0 and the Zyxel WX3100-T0 firmware versions through 5.50(ABVL.4.8)C0 could allow an authenticated attacker with administrator privileges to trigger a denial-of-service (DoS) condition by sending a crafted HTTP request.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zyxel | Lte3301-Plus Firmware | before 1.00\(abqu.9\)c0 |
| Zyxel | Nebula Fwa505 Firmware | before 1.60\(acko.2\)v0 |
| Zyxel | Nebula Fwa510 Firmware | before 1.60\(acgd.0\)c0 |
| Zyxel | Nebula Fwa515 Firmware | before 1.60\(acpz.0\)v0 |
| Zyxel | Nebula Fwa710 Firmware | before 1.60\(acgc.1\)v0 |
| Zyxel | Ee5301-00 Firmware | before 5.63\(acld.2.1\)c0 |
| Zyxel | Ee3301-00 Firmware | before 5.63\(acmu.2.1\)c0 |
| Zyxel | Dx5401-B1 Firmware | before 5.17\(abyo.7.1\)c0 |
| Zyxel | Dx4510-B1 Firmware | before 5.17\(abyl.10.1\)c0 |
| Zyxel | Dx4510-B0 Firmware | before 5.17\(abyl.10.1\)c0 |
| Zyxel | Dx3301-T0 Firmware | before 5.50\(abvy.7.1\)c0 |
| Zyxel | Dx3300-T1 Firmware | before 5.50\(abvy.7.1\)c0 |