CVE-2025-7673: Buffer Overflow
A buffer overflow vulnerability in the URL parser of the zhttpd web server in Zyxel VMG8825-T50K firmware versions prior to V5.50(ABOM.5)C0 could allow an unauthenticated attacker to cause denial-of-service (DoS) conditions and potentially execute arbitrary code by sending a specially crafted HTTP request.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
zhttpd (Zyxel VMG8825-T50K firmware)to a version that resolves this vulnerability.Fixed in V5.50(ABOM.5)C0
Event History
Frequently Asked Questions
What is the severity of CVE-2025-7673?
CVE-2025-7673 is considered a high severity vulnerability due to its potential to cause denial-of-service conditions and execute arbitrary code.
How do I fix CVE-2025-7673?
To fix CVE-2025-7673, you should update the Zyxel VMG8825-T50K firmware to version V5.50(ABOM.5)C0 or later.
What is the impact of CVE-2025-7673?
The impact of CVE-2025-7673 allows unauthorized attackers to crash the zhttpd web server and execute malicious code remotely.
Who is affected by CVE-2025-7673?
Users of Zyxel VMG8825-T50K firmware versions prior to V5.50(ABOM.5)C0 are affected by CVE-2025-7673.
Is CVE-2025-7673 a remote code execution vulnerability?
Yes, CVE-2025-7673 can potentially allow remote code execution through a specially crafted HTTP request.