{"id":"CVE-2025-7673","aliases":["EUVD-2025-21579","GHSA-r3pp-h225-m34v"],"status":"published","title":"A buffer overflow vulnerability in the URL parser of the zhttpd web server in Zyxel VMG8825-T50K...","description":"A buffer overflow vulnerability in the URL parser of the zhttpd web server in Zyxel VMG8825-T50K firmware versions prior to V5.50(ABOM.5)C0 could allow an unauthenticated attacker to cause denial-of-service (DoS) conditions and potentially execute arbitrary code by sending a specially crafted HTTP request.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00652,"percentile":0.51553,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-120"],"published":"2025-07-16T07:11:02Z","modified":"2026-06-17T10:05:26Z","products":[{"vendor":"zyxel","product":"emg3525-t50b_firmware"},{"vendor":"zyxel","product":"emg5523-t50b_firmware"},{"vendor":"zyxel","product":"emg5723-t50k_firmware"},{"vendor":"zyxel","product":"emg6726-b10a_firmware"},{"vendor":"zyxel","product":"ex3510-b0_firmware"},{"vendor":"zyxel","product":"ex5510-b0_firmware"},{"vendor":"zyxel","product":"vmg1312-t20b_firmware"},{"vendor":"zyxel","product":"vmg3625-t50b_firmware"},{"vendor":"zyxel","product":"vmg3925-b10b_firmware"},{"vendor":"zyxel","product":"vmg3925-b10c_firmware"},{"vendor":"zyxel","product":"vmg3927-b50a_firmware"},{"vendor":"zyxel","product":"vmg3927-b50b_firmware"},{"vendor":"zyxel","product":"vmg3927-b60a_firmware"},{"vendor":"zyxel","product":"vmg3927-t50k_firmware"},{"vendor":"zyxel","product":"vmg4005-b50b_firmware"},{"vendor":"zyxel","product":"vmg4927-b50a_firmware"},{"vendor":"zyxel","product":"vmg8623-t50b_firmware"},{"vendor":"zyxel","product":"vmg8825-b50a_firmware"},{"vendor":"zyxel","product":"vmg8825-b60a_firmware"},{"vendor":"zyxel","product":"vmg8825-bx0b_firmware"},{"vendor":"zyxel","product":"vmg8825-t50k firmware"},{"vendor":"zyxel","product":"vmg8825-t50k_firmware"},{"vendor":"zyxel","product":"vmg8924-b10d_firmware"},{"vendor":"zyxel","product":"xmg3927-b50a_firmware"},{"vendor":"zyxel","product":"xmg8825-b50a_firmware"}],"references":[{"url":"https://www.zyxel.com/service-provider/global/en/zyxel-security-advisory-remote-code-execution-and-denial-service-vulnerabilities-cpe","tags":["vendor-advisory","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-7673"},{"url":"https://github.com/advisories/GHSA-r3pp-h225-m34v"}],"sources":{"cve":[{"id":"CVE-2025-7673","description":"A buffer overflow vulnerability in the URL parser of the zhttpd web server in Zyxel VMG8825-T50K firmware versions prior to V5.50(ABOM.5)C0 could allow an unauthenticated attacker to cause denial-of-service (DoS) conditions and potentially execute arbitrary code by sending a specially crafted HTTP request.","status":"published","published":"2025-07-16T07:11:02.974Z","modified":"2026-02-26T17:50:32.365Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"cna"}],"cwes":["CWE-120"],"updated_at":"2026-11-02T14:32:51.544289Z"}],"euvd":[{"id":"EUVD-2025-21579","description":"A buffer overflow vulnerability in the URL parser of the zhttpd web server in Zyxel VMG8825-T50K firmware versions prior to V5.50(ABOM.5)C0 could allow an unauthenticated attacker to cause denial-of-service (DoS) conditions and potentially execute arbitrary code by sending a specially crafted HTTP request.","status":"published","published":"2025-07-16T07:11:02Z","modified":"2026-02-26T17:50:32Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T19:48:19.481461Z"}],"ghsa":[{"id":"GHSA-r3pp-h225-m34v","title":"A buffer overflow vulnerability in the URL parser of the zhttpd web server in Zyxel VMG8825-T50K...","description":"A buffer overflow vulnerability in the URL parser of the zhttpd web server in Zyxel VMG8825-T50K firmware versions prior to V5.50(ABOM.5)C0 could allow an unauthenticated attacker to cause denial-of-service (DoS) conditions and potentially execute arbitrary code by sending a specially crafted HTTP request.","status":"published","published":"2025-07-16T09:31:04Z","modified":"2025-07-16T09:31:15Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-120"],"updated_at":"2026-11-02T15:03:01.660442Z"}],"nvd":[{"id":"CVE-2025-7673","description":"A buffer overflow vulnerability in the URL parser of the zhttpd web server in Zyxel VMG8825-T50K firmware versions prior to V5.50(ABOM.5)C0 could allow an unauthenticated attacker to cause denial-of-service (DoS) conditions and potentially execute arbitrary code by sending a specially crafted HTTP request.","status":"published","published":"2025-07-16T07:15:24.437Z","modified":"2026-06-17T10:05:26.93Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"secondary"}],"cwes":["CWE-120"],"updated_at":"2026-11-02T14:11:18.782156Z"}]}}