medium4.9
CVE-2025-11848
A null pointer dereference vulnerability in the Wake-on-LAN CGI program of the Zyxel VMG3625-T50B firmware version through 5.50(ABPM.9.6)C0 and the Zyxel WX310…
Impact
A null pointer dereference vulnerability in the Wake-on-LAN CGI program of the Zyxel VMG3625-T50B firmware version through 5.50(ABPM.9.6)C0 and the Zyxel WX3100-T0 firmware versions through 5.50(ABVL.4.8)C0 could allow an authenticated attacker with administrator privileges to trigger a denial-of-service (DoS) condition by sending a crafted HTTP request.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zyxel | Ex5601-T1 Firmware | before 5.70\(acdz.5.1\)c0 |
| Zyxel | Ex7501-B0 Firmware | before 5.18\(achn.3.1\)c0 |
| Zyxel | Ex7710-B0 Firmware | before 5.18\(acak.1.6\)c0 |
| Zyxel | Gm4100-B0 Firmware | before 5.18\(accl.2\)c0 |
| Zyxel | Pm7500-00 Firmware | before 5.61\(ackk.1.2\)c0 |
| Zyxel | Vmg3625-T50b Firmware | before 5.50\(abpm.9.7\)c0 |
| Zyxel | Vmg4005-B50a Firmware | before 5.17\(abqa.3.2\)c0 |
| Zyxel | Vmg4005-B60a Firmware | before 5.17\(abqa.3.2\)c0 |
| Zyxel | Ax7501-B1 Firmware | before 5.17\(abpc.7.1\)c0 |
| Zyxel | Pe3301-00 Firmware | before 5.63\(acmt.2.1\)c0 |
| Zyxel | Ex5601-T0 Firmware | before 5.70\(acdz.5.1\)c0 |
| Zyxel | Ex5512-T0 Firmware | before 5.70\(aceg.5.3\)c0 |