← All CVEs

CVE-2025-7673

critical · 9.8

A buffer overflow vulnerability in the URL parser of the zhttpd web server in Zyxel VMG8825-T50K firmware versions prior to V5.50(ABOM.5)C0 could allow an unauthenticated attacker to cause denial-of-service (DoS) conditions and potentially execute arbitrary code by sending a specially crafted HTTP request.

9.8
CVSS
0.5%
EPSS (exploit prob.)
45th
EPSS percentile
2025-07-16
Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-120

Affected products

VendorProductAffected versions
zyxelemg3525-t50b_firmware< 5.50\(abpm.4\)c0
zyxelemg3525-t50ball versions
zyxelemg3525-t50b_firmware< 5.50\(absl.0\)b8
zyxelemg3525-t50ball versions
zyxelemg5523-t50b_firmware< 5.50\(abpm.4\)c0
zyxelemg5523-t50ball versions
zyxelemg5523-t50b_firmware< 5.50\(absl.0\)b8
zyxelemg5523-t50ball versions
zyxelemg5723-t50k_firmware< 5.50\(abom.5\)c0
zyxelemg5723-t50kall versions
zyxelemg6726-b10a_firmware< 5.13\(abnp.6\).c
zyxelemg6726-b10aall versions
zyxelex3510-b0_firmware< 5.17\(abup.3\)c0
zyxelex3510-b0all versions
zyxelex5510-b0_firmware< 5.15\(abqx.3\)c0
zyxelex5510-b0all versions
zyxelvmg1312-t20b_firmware< 5.50\(absb.3\)c0
zyxelvmg1312-t20ball versions
zyxelvmg3625-t50b_firmware< 5.50\(abpm.4\)c0
zyxelvmg3625-t50ball versions
zyxelvmg3925-b10b_firmware< 5.13\(aavf.16\)c
zyxelvmg3925-b10ball versions
zyxelvmg3925-b10c_firmware< 5.13\(aavf.16\)c
zyxelvmg3925-b10call versions
zyxelvmg3927-b50a_firmware< 5.15\(abmt.5\)c0
zyxelvmg3927-b50aall versions
zyxelvmg3927-b60a_firmware< 5.15\(abmt.5\)c0
zyxelvmg3927-b60aall versions
zyxelvmg3927-b50b_firmware< 5.13\(ably.6\)c0
zyxelvmg3927-b50ball versions
zyxelvmg3927-t50k_firmware< 5.50\(abom.5\)c0
zyxelvmg3927-t50kall versions
zyxelvmg4005-b50b_firmware< 5.13\(abrl.5\)c0
zyxelvmg4005-b50ball versions
zyxelvmg4927-b50a_firmware< 5.13\(ably.6\)c0
zyxelvmg4927-b50aall versions
zyxelvmg8623-t50b_firmware< 5.50\(abpm.4\)c0
zyxelvmg8623-t50ball versions
zyxelvmg8825-b50a_firmware< 5.15\(abmt.5\)c0
zyxelvmg8825-b50aall versions

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2025-7673