Approved changes feed: RSS · Atom

cpe:2.3:a:zyxel:vmg3625-t50b_firmware:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorZyxel (d3fcf896-5708-55f8-8f74-3e19a9d55b89)
ProductVmg3625 T50B Firmware (19b997a3-2dbc-5536-9ecd-f1c631b69ffd)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-1459 vulnerable 2026-06-08 07:49:08.634949 Details available
HIGH (7.2)
A post-authentication command injection vulnerability in the TR-369 certificate download CGI program of the Zyxel VMG3625-T50B firmware versions through 5.50(ABPM.9.7)C0 could allow an authenticated attacker with administrator privileges to execute operating system (OS) commands on an affected device.
Published: 2026-02-24T02:48:35.439Z
Updated: 2026-02-26T14:44:10.011Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-11848 vulnerable 2026-06-08 07:04:29.209080 Details available
MEDIUM (4.9)
A null pointer dereference vulnerability in the Wake-on-LAN CGI program of the Zyxel VMG3625-T50B firmware version through 5.50(ABPM.9.6)C0 and the Zyxel WX3100-T0 firmware versions through 5.50(ABVL.4.8)C0 could allow an authenticated attacker with administrator privileges to trigger a denial-of-service (DoS) condition by sending a crafted HTTP request.
Published: 2026-02-24T02:14:18.688Z
Updated: 2026-02-24T20:25:28.725Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-11847 vulnerable 2026-06-08 07:04:29.198389 Details available
MEDIUM (4.9)
A null pointer dereference vulnerability in the IP settings CGI program of the Zyxel VMG3625-T50B firmware versions through 5.50(ABPM.9.6)C0 and the Zyxel WX3100-T0 firmware versions through 5.50(ABVL.4.8)C0 could allow an authenticated attacker with administrator privileges to trigger a denial-of-service (DoS) condition by sending a crafted HTTP request.
Published: 2026-02-24T02:09:44.684Z
Updated: 2026-02-24T20:27:08.473Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-11846 vulnerable 2026-06-08 07:04:29.182778 Details available
MEDIUM (4.9)
A null pointer dereference vulnerability in the account settings CGI program of the Zyxel VMG3625-T50B firmware versions through 5.50(ABPM.9.6)C0 and the Zyxel WX3100-T0 firmware versions through 5.50(ABVL.4.8)C0 could allow an authenticated attacker with administrator privileges to trigger a denial-of-service (DoS) condition by sending a crafted HTTP request.
Published: 2026-02-24T01:37:57.257Z
Updated: 2026-02-24T16:09:10.139Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-11845 vulnerable 2026-06-08 07:04:29.070727 Details available
MEDIUM (4.9)
A null pointer dereference vulnerability in the certificate downloader CGI program of the Zyxel VMG3625-T50B firmware versions through 5.50(ABPM.9.6)C0 and the Zyxel WX3100-T0 firmware versions through 5.50(ABVL.4.8)C0 could allow an authenticated attacker with administrator privileges to trigger a denial-of-service (DoS) condition by sending a crafted HTTP request.
Published: 2026-02-24T01:30:50.433Z
Updated: 2026-02-24T16:12:02.942Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-9197 vulnerable 2026-06-08 07:00:26.883079 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-35036 vulnerable 2026-06-08 05:32:17.493589 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.