critical9.8
CVE-2025-7673
A buffer overflow vulnerability in the URL parser of the zhttpd web server in Zyxel VMG8825-T50K firmware versions prior to V5.50(ABOM.5)C0 could allow an unau…
Impact
A buffer overflow vulnerability in the URL parser of the zhttpd web server in Zyxel VMG8825-T50K firmware versions prior to V5.50(ABOM.5)C0 could allow an unauthenticated attacker to cause denial-of-service (DoS) conditions and potentially execute arbitrary code by sending a specially crafted HTTP request.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zyxel | Emg3525-T50b Firmware | before 5.50\(abpm.4\)c0 before 5.50\(absl.0\)b8 |
| Zyxel | Emg5523-T50b Firmware | before 5.50\(abpm.4\)c0 before 5.50\(absl.0\)b8 |
| Zyxel | Emg5723-T50k Firmware | before 5.50\(abom.5\)c0 |
| Zyxel | Emg6726-B10a Firmware | before 5.13\(abnp.6\).c |
| Zyxel | Ex3510-B0 Firmware | before 5.17\(abup.3\)c0 |
| Zyxel | Ex5510-B0 Firmware | before 5.15\(abqx.3\)c0 |
| Zyxel | Vmg1312-T20b Firmware | before 5.50\(absb.3\)c0 |
| Zyxel | Vmg3625-T50b Firmware | before 5.50\(abpm.4\)c0 |
| Zyxel | Vmg3925-B10b Firmware | before 5.13\(aavf.16\)c |
| Zyxel | Vmg3925-B10c Firmware | before 5.13\(aavf.16\)c |
| Zyxel | Vmg3927-B50a Firmware | before 5.15\(abmt.5\)c0 |
| Zyxel | Vmg3927-B60a Firmware | before 5.15\(abmt.5\)c0 |