Null Pointer Dereference Vulnerability in Zyxel VMG3625-T50B and WX3100-T0

CVE-2025-11846

What is CVE-2025-11846?

A null pointer dereference vulnerability has been identified in the account settings CGI program of the Zyxel VMG3625-T50B and WX3100-T0 firmware. This issue affects specific firmware versions and can allow authenticated attackers with administrator privileges to exploit the vulnerability. By sending a specially crafted HTTP request, an attacker could initiate a denial-of-service (DoS) condition, potentially rendering the affected devices inoperable. It is essential for users of these devices to apply security updates provided by Zyxel to mitigate this risk.

References