CVE-2025-11848mediumCWE-476

CVE-2025-11848: medium-severity vulnerability in Zyxel VMG3625-T50B firmware

Published

Follow this CVE+ Monitor VMG3625-T50B+ Monitor WX3100-T0

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 4.9epss 2.1%
A null pointer dereference vulnerability in the Wake-on-LAN CGI program of the Zyxel VMG3625-T50B firmware version through 5.50(ABPM.9.6)C0 and the Zyxel WX3100-T0 firmware versions through 5.50(ABVL.4.8)C0 could allow an authenticated attacker with administrator privileges to trigger a denial-of-service (DoS) condition by sending a crafted HTTP request.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Affected products
Zyxel · VMG3625-T50B firmwareZyxel · WX3100-T0 firmware
Related CVEs — Zyxel VMG3625-T50B firmware

In the same product, most dangerous first.

CVE-2025-11847MEDIUMCVE-2025-11847EPSS 1.9%CVE-2025-11846MEDIUMCVE-2025-11846EPSS 1.3%CVE-2026-1459HIGHCVE-2026-1459EPSS 1.0%CVE-2025-11845MEDIUMCVE-2025-11845EPSS 0.9%CVE-2024-9197MEDIUMCVE-2024-9197EPSS 0.5%CVE-2021-35036MEDIUMCVE-2021-35036EPSS 0.5%