Home

Description

A buffer overflow vulnerability in the URL parser of the zhttpd web server in Zyxel VMG8825-T50K firmware versions prior to V5.50(ABOM.5)C0 could allow an unauthenticated attacker to cause denial-of-service (DoS) conditions and potentially execute arbitrary code by sending a specially crafted HTTP request.

PUBLISHED Reserved 2025-07-15 | Published 2025-07-16 | Updated 2026-02-26 | Assigner Zyxel




CRITICAL: 9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Problem types

CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Product status

Default status
unaffected

< V5.50(ABOM.5)C0
affected

References

www.zyxel.com/...tion-and-denial-service-vulnerabilities-cpe vendor-advisory

cve.org (CVE-2025-7673)

nvd.nist.gov (CVE-2025-7673)

Download JSON