Zyxel Xmg3927-B50A Firmware vulnerabilities

3 known vulnerabilities affecting zyxel/xmg3927-b50a_firmware.

Total CVEs

3

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

CRITICAL1HIGH1MEDIUM1

Vulnerabilities

Page 1 of 1

CVE-2025-7673CRITICALCVSS 9.8fixed in 5.15\(abmt.5\)c02025-07-16

CVE-2025-7673 [CRITICAL] CWE-120 CVE-2025-7673: A buffer overflow vulnerability in the URL parser of the zhttpd web server in Zyxel VMG8825-T50K fir A buffer overflow vulnerability in the URL parser of the zhttpd web server in Zyxel VMG8825-T50K firmware versions prior to V5.50(ABOM.5)C0 could allow an unauthenticated attacker to cause denial-of-service (DoS) conditions and potentially execute arbitrary code by sending a specially crafted HTTP request.

CVE-2022-26413HIGHCVSS 8.0fixed in 5.17\(abmt.6\)c02022-04-11

CVE-2022-26413 [HIGH] CWE-78 CVE-2022-26413: A command injection vulnerability in the CGI program of Zyxel VMG3312-T20A firmware version 5.30(ABF A command injection vulnerability in the CGI program of Zyxel VMG3312-T20A firmware version 5.30(ABFX.5)C0 could allow a local authenticated attacker to execute arbitrary OS commands on a vulnerable device via a LAN interface.

CVE-2022-26414MEDIUMCVSS 5.5fixed in 5.17\(abmt.6\)c02022-04-11

CVE-2022-26414 [MEDIUM] CWE-120 CVE-2022-26414: A potential buffer overflow vulnerability was identified in some internal functions of Zyxel VMG3312 A potential buffer overflow vulnerability was identified in some internal functions of Zyxel VMG3312-T20A firmware version 5.30(ABFX.5)C0, which could be exploited by a local authenticated attacker to cause a denial of service.