CVE-2025-7673 Details
Description
A buffer overflow vulnerability in the URL parser of the zhttpd web server in Zyxel VMG8825-T50K firmware versions prior to V5.50(ABOM.5)C0 could allow an unauthenticated attacker to cause denial-of-service (DoS) conditions and potentially execute arbitrary code by sending a specially crafted HTTP request.
A buffer overflow vulnerability has been identified in the URL parser of the zhttpd web server on Zyxel VMG8825-T50K firmware versions prior to V5.50(ABOM.5)C0. This vulnerability could allow an unauthenticated attacker to cause denial-of-service conditions and potentially execute arbitrary code by sending a specially crafted HTTP request.
Users can update to Zyxel VMG8825-T50K version V5.50(ABOM.5)C0, released in December 2020, to address this vulnerability.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Jul 19, 2025References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://www.zyxel.com/service-provider/global/en/zyxel-security-advisory-remote-code-execution-and-denial-service-vulnerabilities-cpe | [email protected] | Vendor Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-120 | Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| zyxel emg3525-t50b firmware | < 5.50\(abpm.4\)c0 < 5.50\(absl.0\)b8 |
CPE
Remediation
| |
| zyxel emg3525-t50b | All versions |
CPE
Remediation
| |
| zyxel emg5523-t50b firmware | < 5.50\(abpm.4\)c0 < 5.50\(absl.0\)b8 |
CPE
Remediation
| |
| zyxel emg5523-t50b | All versions |
CPE
Remediation
| |
| zyxel emg5723-t50k firmware | < 5.50\(abom.5\)c0 |
CPE
Remediation
| |
| zyxel emg5723-t50k | All versions |
CPE
Remediation
| |
| zyxel emg6726-b10a firmware | < 5.13\(abnp.6\).c |
CPE
Remediation
| |
| zyxel emg6726-b10a | All versions |
CPE
Remediation
| |
| zyxel ex3510-b0 firmware | < 5.17\(abup.3\)c0 |
CPE
Remediation
| |
| zyxel ex3510-b0 | All versions |
CPE
Remediation
| |
| zyxel ex5510-b0 firmware | < 5.15\(abqx.3\)c0 |
CPE
Remediation
| |
| zyxel ex5510-b0 | All versions |
CPE
Remediation
| |
| zyxel vmg1312-t20b firmware | < 5.50\(absb.3\)c0 |
CPE
Remediation
| |
| zyxel vmg1312-t20b | All versions |
CPE
Remediation
| |
| zyxel vmg3625-t50b firmware | < 5.50\(abpm.4\)c0 |
CPE
Remediation
| |
| zyxel vmg3625-t50b | All versions |
CPE
Remediation
| |
| zyxel vmg3925-b10b firmware | < 5.13\(aavf.16\)c |
CPE
Remediation
| |
| zyxel vmg3925-b10b | All versions |
CPE
Remediation
| |
| zyxel vmg3925-b10c firmware | < 5.13\(aavf.16\)c |
CPE
Remediation
| |
| zyxel vmg3925-b10c | All versions |
CPE
Remediation
| |
| zyxel vmg3927-b50a firmware | < 5.15\(abmt.5\)c0 |
CPE
Remediation
| |
| zyxel vmg3927-b50a | All versions |
CPE
Remediation
| |
| zyxel vmg3927-b60a firmware | < 5.15\(abmt.5\)c0 |
CPE
Remediation
| |
| zyxel vmg3927-b60a | All versions |
CPE
Remediation
| |
| zyxel vmg3927-b50b firmware | < 5.13\(ably.6\)c0 |
CPE
Remediation
| |
| zyxel vmg3927-b50b | All versions |
CPE
Remediation
| |
| zyxel vmg3927-t50k firmware | < 5.50\(abom.5\)c0 |
CPE
Remediation
| |
| zyxel vmg3927-t50k | All versions |
CPE
Remediation
| |
| zyxel vmg4005-b50b firmware | < 5.13\(abrl.5\)c0 |
CPE
Remediation
| |
| zyxel vmg4005-b50b | All versions |
CPE
Remediation
| |
| zyxel vmg4927-b50a firmware | < 5.13\(ably.6\)c0 |
CPE
Remediation
| |
| zyxel vmg4927-b50a | All versions |
CPE
Remediation
| |
| zyxel vmg8623-t50b firmware | < 5.50\(abpm.4\)c0 |
CPE
Remediation
| |
| zyxel vmg8623-t50b | All versions |
CPE
Remediation
| |
| zyxel vmg8825-b50a firmware | < 5.15\(abmt.5\)c0 |
CPE
Remediation
| |
| zyxel vmg8825-b50a | All versions |
CPE
Remediation
| |
| zyxel vmg8825-b60a firmware | < 5.15\(abmt.5\)c0 |
CPE
Remediation
| |
| zyxel vmg8825-b60a | All versions |
CPE
Remediation
| |
| zyxel vmg8825-bx0b firmware | < 5.17\(abny.5\)c0 |
CPE
Remediation
| |
| zyxel vmg8825-bx0b | All versions |
CPE
Remediation
| |
| zyxel vmg8825-t50k firmware | < 5.50\(abom.5\)c0 |
CPE
Remediation
| |
| zyxel vmg8825-t50k | All versions |
CPE
Remediation
| |
| zyxel vmg8924-b10d firmware | < 5.13\(abgq.6\)c0 |
CPE
Remediation
| |
| zyxel vmg8924-b10d | All versions |
CPE
Remediation
| |
| zyxel xmg3927-b50a firmware | < 5.15\(abmt.5\)c0 |
CPE
Remediation
| |
| zyxel xmg3927-b50a | All versions |
CPE
Remediation
| |
| zyxel xmg8825-b50a firmware | < 5.17\(abmt.5\)c0 |
CPE
Remediation
| |
| zyxel xmg8825-b50a | All versions |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Jan 14, 2026 | Initial Analysis | [email protected] |
| Jul 16, 2025 | New CVE Received | [email protected] |