9.8

CVE-2025-13942

A command injection vulnerability in the UPnP function of the Zyxel EX3510-B0 firmware versions through 5.17(ABUP.15.1)C0 could allow a remote attacker to execute operating system (OS) commands on an affected device by sending specially crafted UPnP SOAP requests.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Zyxel ≫ Wx5610-b0 Firmware Version < 5.18\(acgj.0.5\)c0
   Zyxel ≫ Wx5610-b0 Version -
Zyxel ≫ Lte3301-plus Firmware Version < 1.00\(abqu.9\)c0
   Zyxel ≫ Lte3301-plus Version -
Zyxel ≫ Nebula Lte3301-plus Firmware Version < 1.18\(acca.6\)v0
   Zyxel ≫ Nebula Lte3301-plus Version -
Zyxel ≫ Nr7101 Firmware Version < 1.00\(abuv.12\)b2
   Zyxel ≫ Nr7101 Version -
Zyxel ≫ Nebula Nr7101 Firmware Version < 1.16\(accc.1\)v0
   Zyxel ≫ Nebula Nr7101 Version -
Zyxel ≫ Dx4510-b0 Firmware Version < 5.17\(abyl.10.1\)c0
   Zyxel ≫ Dx4510-b0 Version -
Zyxel ≫ Dx4510-b1 Firmware Version < 5.17\(abyl.10.1\)c0
   Zyxel ≫ Dx4510-b1 Version -
Zyxel ≫ Ee6510-10 Firmware Version < 5.19\(acjq.4.1\)c0
   Zyxel ≫ Ee6510-10 Version -
Zyxel ≫ Emg6726-b10a Firmware Version < 5.13\(abnp.8.2\)c1
   Zyxel ≫ Emg6726-b10a Version -
Zyxel ≫ Ex2210-t0 Firmware Version < 5.50\(acdi.2.4\)c0
   Zyxel ≫ Ex2210-t0 Version -
Zyxel ≫ Ex3510-b0 Firmware Version < 5.17\(abup.15.2\)c0
   Zyxel ≫ Ex3510-b0 Version -
Zyxel ≫ Ex3510-b1 Firmware Version < 5.17\(abup.15.2\)c0
   Zyxel ≫ Ex3510-b1 Version -
Zyxel ≫ Ex5510-b0 Firmware Version < 5.17\(abqx.11.1\)c0
   Zyxel ≫ Ex5510-b0 Version -
Zyxel ≫ Ex5512-t0 Firmware Version < 5.70\(aceg.5.4\)c0
   Zyxel ≫ Ex5512-t0 Version -
Zyxel ≫ Ex7710-b0 Firmware Version < 5.18\(acak.1.6\)c0
   Zyxel ≫ Ex7710-b0 Version -
Zyxel ≫ Vmg4927-b50a Firmware Version < 5.13\(ably.10.2\)c0
   Zyxel ≫ Vmg4927-b50a Version -
Zyxel ≫ Px3321-t1 Firmware Version < 5.44\(acjb.1.5\)c0
   Zyxel ≫ Px3321-t1 Version -
Zyxel ≫ Px3321-t1 Firmware Version < 5.44\(achk.3\)c0
   Zyxel ≫ Px3321-t1 Version -
Zyxel ≫ Px5301-t0 Firmware Version < 5.44\(ackb.0.6\)c0
   Zyxel ≫ Px5301-t0 Version -
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.06% 0.602
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
security@zyxel.com.tw 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-null-pointer-dereference-and-command-injection-vulnerabilities-in-certain-4g-lte-5g-nr-cpe-dsl-ethernet-cpe-fiber-onts-security-routers-and-wireless-extenders-02-24-2026
Vendor Advisory