Zyxel VMG8825-T50K Buffer Overflow Vulnerability in zhttpd Web Server Allowing Denial-of-Service and Potential Remote Code Execution

A buffer overflow vulnerability has been identified in the URL parser of the zhttpd web server on Zyxel VMG8825-T50K firmware versions prior to V5.50(ABOM.5)C0. This vulnerability could allow an unauthenticated attacker to cause denial-of-service conditions and potentially execute arbitrary code by sending a specially crafted HTTP request.

Impact

Exploitation of this vulnerability can lead to a denial-of-service condition and potentially allow for remote code execution on the affected device.

Remediation

Users can update to Zyxel VMG8825-T50K version V5.50(ABOM.5)C0, released in December 2020, to address this vulnerability.