CVE-2025-7673

Published: Jul 16, 2025Modified: Jun 17, 2026

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: security@zyxel.com.tw (Secondary)

Description

A buffer overflow vulnerability in the URL parser of the zhttpd web server in Zyxel VMG8825-T50K firmware versions prior to V5.50(ABOM.5)C0 could allow an unauthenticated attacker to cause denial-of-service (DoS) conditions and potentially execute arbitrary code by sending a specially crafted HTTP request.

Affected (26)

Products: Zyxel: Emg3525 T50b Firmware, Emg5523 T50b Firmware, Emg5723 T50k Firmware, Emg6726 B10a Firmware, Ex3510 B0 Firmware, Ex5510 B0 Firmware, Vmg1312 T20b Firmware, Vmg3625 T50b Firmware, Vmg3925 B10b Firmware, Vmg3925 B10c Firmware, Vmg3927 B50a Firmware, Vmg3927 B60a Firmware, Vmg3927 B50b Firmware, Vmg3927 T50k Firmware, Vmg4005 B50b Firmware, Vmg4927 B50a Firmware, Vmg8623 T50b Firmware, Vmg8825 B50a Firmware, Vmg8825 B60a Firmware, Vmg8825 Bx0b Firmware, Vmg8825 T50k Firmware, Vmg8924 B10d Firmware, Xmg3927 B50a Firmware, Xmg8825 B50a Firmware

Zyxel

24 products

Emg3525 T50b Firmware

Emg5523 T50b Firmware

Emg5723 T50k Firmware

Emg6726 B10a Firmware

Ex3510 B0 Firmware

Ex5510 B0 Firmware

Vmg1312 T20b Firmware

Vmg3625 T50b Firmware

Vmg3925 B10b Firmware

Vmg3925 B10c Firmware

Vmg3927 B50a Firmware

Vmg3927 B60a Firmware

Vmg3927 B50b Firmware

Vmg3927 T50k Firmware

Vmg4005 B50b Firmware

Vmg4927 B50a Firmware

Vmg8623 T50b Firmware

Vmg8825 B50a Firmware

Vmg8825 B60a Firmware

Vmg8825 Bx0b Firmware

Vmg8825 T50k Firmware

Vmg8924 B10d Firmware

Xmg3927 B50a Firmware

Xmg8825 B50a Firmware

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Zyxel Emg3525 T50b Firmware	Before 5.50\(abpm.4\)c0

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Zyxel Emg3525 T50b Firmware	Before 5.50\(absl.0\)b8

Running on/with	Platform Versions
Zyxel Emg3525 T50b	All versions

Configuration C

1 vulnerable

Vulnerable Software	Affected Versions
Zyxel Emg5523 T50b Firmware	Before 5.50\(abpm.4\)c0

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Zyxel Emg5523 T50b Firmware	Before 5.50\(absl.0\)b8

Running on/with	Platform Versions
Zyxel Emg5523 T50b	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Zyxel Emg5723 T50k Firmware	Before 5.50\(abom.5\)c0

Running on/with	Platform Versions
Zyxel Emg5723 T50k	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Zyxel Emg6726 B10a Firmware	Before 5.13\(abnp.6\).c

Running on/with	Platform Versions
Zyxel Emg6726 B10a	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Zyxel Ex3510 B0 Firmware	Before 5.17\(abup.3\)c0

Running on/with	Platform Versions
Zyxel Ex3510 B0	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Zyxel Ex5510 B0 Firmware	Before 5.15\(abqx.3\)c0

Running on/with	Platform Versions
Zyxel Ex5510 B0	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Zyxel Vmg1312 T20b Firmware	Before 5.50\(absb.3\)c0

Running on/with	Platform Versions
Zyxel Vmg1312 T20b	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Zyxel Vmg3625 T50b Firmware	Before 5.50\(abpm.4\)c0

Running on/with	Platform Versions
Zyxel Vmg3625 T50b	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Zyxel Vmg3925 B10b Firmware	Before 5.13\(aavf.16\)c

Running on/with	Platform Versions
Zyxel Vmg3925 B10b	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Zyxel Vmg3925 B10c Firmware	Before 5.13\(aavf.16\)c

Running on/with	Platform Versions
Zyxel Vmg3925 B10c	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Zyxel Vmg3927 B50a Firmware	Before 5.15\(abmt.5\)c0

Running on/with	Platform Versions
Zyxel Vmg3927 B50a	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Zyxel Vmg3927 B60a Firmware	Before 5.15\(abmt.5\)c0

Running on/with	Platform Versions
Zyxel Vmg3927 B60a	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Zyxel Vmg3927 B50b Firmware	Before 5.13\(ably.6\)c0

Running on/with	Platform Versions
Zyxel Vmg3927 B50b	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Zyxel Vmg3927 T50k Firmware	Before 5.50\(abom.5\)c0

Running on/with	Platform Versions
Zyxel Vmg3927 T50k	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Zyxel Vmg4005 B50b Firmware	Before 5.13\(abrl.5\)c0

Running on/with	Platform Versions
Zyxel Vmg4005 B50b	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Zyxel Vmg4927 B50a Firmware	Before 5.13\(ably.6\)c0

Running on/with	Platform Versions
Zyxel Vmg4927 B50a	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Zyxel Vmg8623 T50b Firmware	Before 5.50\(abpm.4\)c0

Running on/with	Platform Versions
Zyxel Vmg8623 T50b	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Zyxel Vmg8825 B50a Firmware	Before 5.15\(abmt.5\)c0

Running on/with	Platform Versions
Zyxel Vmg8825 B50a	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Zyxel Vmg8825 B60a Firmware	Before 5.15\(abmt.5\)c0

Running on/with	Platform Versions
Zyxel Vmg8825 B60a	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Zyxel Vmg8825 Bx0b Firmware	Before 5.17\(abny.5\)c0

Running on/with	Platform Versions
Zyxel Vmg8825 Bx0b	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Zyxel Vmg8825 T50k Firmware	Before 5.50\(abom.5\)c0

Running on/with	Platform Versions
Zyxel Vmg8825 T50k	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Zyxel Vmg8924 B10d Firmware	Before 5.13\(abgq.6\)c0

Running on/with	Platform Versions
Zyxel Vmg8924 B10d	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Zyxel Xmg3927 B50a Firmware	Before 5.15\(abmt.5\)c0

Running on/with	Platform Versions
Zyxel Xmg3927 B50a	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Zyxel Xmg8825 B50a Firmware	Before 5.17\(abmt.5\)c0

Running on/with	Platform Versions
Zyxel Xmg8825 B50a	All versions

Related CWEs

CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.

References (1)

https://www.zyxel.com/service-provider/global/en/zyxel-security-advisory-remote-code-execution-and-denial-service-vulnerabilities-cpe

Source: security@zyxel.com.tw

Vendor Advisory

Timeline

No history available yet.