CVE-2025-11848: Null Pointer Dereference
Published Feb 24, 2026
·Updated
A null pointer dereference vulnerability in the Wake-on-LAN CGI program of the Zyxel VMG3625-T50B firmware version through 5.50(ABPM.9.6)C0 and the Zyxel WX3100-T0 firmware versions through 5.50(ABVL.4.8)C0 could allow an authenticated attacker with administrator privileges to trigger a denial-of-service (DoS) condition by sending a crafted HTTP request.
Affected Software
100 affected components
Zyxel VMG3625-T50B<=5.50(ABPM.9.6)C0
Zyxel WX3100-T0<=5.50(ABVL.4.8)C0
All of the following
Zyxel Ee5301-00 Firmware<5.63\(acld.2.1\)c0
Zyxel Ee5301-00
All of the following
Zyxel Ee3301-00 Firmware<5.63\(acmu.2.1\)c0
Zyxel Ee3301-00
All of the following
Zyxel Dx5401-b1 Firmware<5.17\(abyo.7.1\)c0
Zyxel Dx5401-b1
All of the following
Zyxel Dx4510-b1 Firmware<5.17\(abyl.10.1\)c0
Zyxel Dx4510-b1
All of the following
Zyxel Dx4510-b0 Firmware<5.17\(abyl.10.1\)c0
Zyxel Dx4510-b0
All of the following
Zyxel DX3301-T0 firmware<5.50\(abvy.7.1\)c0
Zyxel DX3301-T0
All of the following
Zyxel Dx3300-t1 Firmware<5.50\(abvy.7.1\)c0
Zyxel Dx3300-t1
All of the following
Zyxel DX3300-T0 firmware<5.50\(abvy.7.1\)c0
Zyxel DX3300-T0
All of the following
Zyxel Ee6510-10 Firmware<5.19\(acjq.4.1\)c0
Zyxel Ee6510-10
All of the following
Zyxel Emg3525-t50b Firmware<5.50\(abpm.9.7\)c0
Zyxel Emg3525-t50b
All of the following
Zyxel Emg5523-t50b Firmware<5.50\(abpm.9.7\)c0
Zyxel Emg5523-t50b
All of the following
Zyxel Ex2210-t0 Firmware<5.50\(acdi.2.3\)c0
Zyxel Ex2210-t0
All of the following
Zyxel Ex3300-t0 Firmware<5.50\(abvy.7.1\)c0
Zyxel Ex3300-t0
All of the following
Zyxel Ex3300-t1 Firmware<5.50\(abvy.7.1\)c0
Zyxel Ex3300-t1
All of the following
Zyxel EX3301-T0 firmware<5.50\(abvy.7.1\)c0
Zyxel EX3301-T0
All of the following
Zyxel Ex3500-t0 Firmware<5.44\(achr.5.1\)c0
Zyxel Ex3500-t0
All of the following
Zyxel Ex3501-t0 Firmware<5.44\(achr.5.1\)c0
Zyxel Ex3501-t0
All of the following
Zyxel EX3510-B0 firmware<5.17\(abup.15.2\)c0
Zyxel EX3510-B0
All of the following
Zyxel Ex3510-b1 Firmware<5.17\(abup.15.2\)c0
Zyxel Ex3510-b1
All of the following
Zyxel Ex3600-t0 Firmware<5.70\(acif.2.1\)c0
Zyxel Ex3600-t0
All of the following
Zyxel Ex5401-b1 Firmware<5.17\(abyo.7.1\)c0
Zyxel Ex5401-b1
All of the following
Zyxel Ex5510-b0 Firmware<5.17\(abqx.11.1\)c0
Zyxel Ex5510-b0
All of the following
Zyxel Ex5512-t0 Firmware<5.70\(aceg.5.3\)c0
Zyxel Ex5512-t0
All of the following
Zyxel Ex5601-t0 Firmware<5.70\(acdz.5.1\)c0
Zyxel Ex5601-t0
All of the following
Zyxel EX5601-T1 firmware<5.70\(acdz.5.1\)c0
Zyxel EX5601-T1
All of the following
Zyxel Ex7501-b0 Firmware<5.18\(achn.3.1\)c0
Zyxel Ex7501-b0
All of the following
Zyxel Ex7710-b0 Firmware<5.18\(acak.1.6\)c0
Zyxel Ex7710-b0
All of the following
Zyxel Gm4100-b0 Firmware<5.18\(accl.2\)c0
Zyxel Gm4100-b0
All of the following
Zyxel Pm7500-00 Firmware<5.61\(ackk.1.2\)c0
Zyxel Pm7500-00
All of the following
Zyxel VMG3625-T50B firmware<5.50\(abpm.9.7\)c0
Zyxel VMG3625-T50B
All of the following
Zyxel VMG4005-B50A firmware<5.17\(abqa.3.2\)c0
Zyxel VMG4005-B50A
All of the following
Zyxel Vmg4005-b60a Firmware<5.17\(abqa.3.2\)c0
Zyxel Vmg4005-b60a
All of the following
Zyxel AX7501-B1 firmware<5.17\(abpc.7.1\)c0
Zyxel AX7501-B1
All of the following
Zyxel Pe3301-00 Firmware<5.63\(acmt.2.1\)c0
Zyxel Pe3301-00
All of the following
Zyxel Pe5301-01 Firmware<5.63\(acoj.2.1\)c0
Zyxel Pe5301-01
All of the following
Zyxel Pm3100-t0 Firmware<5.42\(acbf.4.1\)c0
Zyxel Pm3100-t0
All of the following
Zyxel Pm5100-t0 Firmware<5.42\(acbf.4.1\)c0
Zyxel Pm5100-t0
All of the following
Zyxel Pm5100-t1 Firmware<5.42\(acbf.4.1\)c0
Zyxel Pm5100-t1
All of the following
Zyxel Pm7300-t0 Firmware<5.42\(abyy.4.1\)c0
Zyxel Pm7300-t0
All of the following
Zyxel Px3321-t1 Firmware<5.44\(achk.3\)c0
Zyxel Px3321-t1
All of the following
Zyxel Px3321-t1 Firmware<5.44\(acjb.1.5\)c0
Zyxel Px3321-t1
All of the following
Zyxel Px5301-t0 Firmware<5.44\(ackb.0.6\)c0
Zyxel Px5301-t0
All of the following
Zyxel Scr 50axe Firmware<1.30\(acgn.0\)c0
Zyxel Scr 50axe
All of the following
Zyxel Vmg8623-t50b Firmware<5.50\(abpm.9.7\)c0
Zyxel Vmg8623-t50b
All of the following
Zyxel We3300-00 Firmware<5.70\(acka.1.1\)c0
Zyxel We3300-00
All of the following
Zyxel WX3100-T0 firmware<5.50\(abvl.4.9\)c0
Zyxel WX3100-T0
All of the following
Zyxel Wx3401-b1 Firmware<5.17\(abve.2.10\)c0
Zyxel Wx3401-b1
All of the following
Zyxel Wx5600-t0 Firmware<5.70\(aceb.5.1\)c0
Zyxel Wx5600-t0
All of the following
Zyxel Wx5610-b0 Firmware<5.18\(acgj.0.5\)c0
Zyxel Wx5610-b0
Event History
Feb 24, 2026
CVE Published
via MITRE·02:14 AM
Data Sourced
via MITRE·02:14 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·03:16 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-11848?
CVE-2025-11848 has been classified as a high severity vulnerability due to its potential to allow denial-of-service attacks.
2
How do I fix CVE-2025-11848?
To fix CVE-2025-11848, update the firmware of the Zyxel VMG3625-T50B or WX3100-T0 to the latest version beyond 5.50(ABPM.9.6)C0 and 5.50(ABVL.4.8)C0 respectively.
3
Who is affected by CVE-2025-11848?
CVE-2025-11848 affects Zyxel VMG3625-T50B firmware versions through 5.50(ABPM.9.6)C0 and Zyxel WX3100-T0 firmware versions through 5.50(ABVL.4.8)C0.
4
What type of vulnerability is CVE-2025-11848?
CVE-2025-11848 is a null pointer dereference vulnerability that can lead to denial-of-service.
5
Can CVE-2025-11848 be exploited remotely?
CVE-2025-11848 requires an authenticated attacker with administrator privileges to exploit the vulnerability.