Not scored
CVE-2025-13942
Zyxel EX3510-B0 firmware vulnerability
ZyxelEX3510-B0 firmware
Status
- Not in CISA KEV
- Vendor fix available
Exploit probabilityEPSSchecked 25 Oct
1.2%probability of exploitation in the next 30 days
Higher than 67% of scored CVEs
SeverityCVSS
–Not scored yet
Description NVD
A command injection vulnerability in the UPnP function of the Zyxel EX3510-B0 firmware versions through 5.17(ABUP.15.1)C0 could allow a remote attacker to execute operating system (OS) commands on an affected device by sending specially crafted UPnP SOAP requests.
Coverage 2 articles · 2 outlets
See the full timelineShow as table
| Published (UTC) | Outlet | Headline |
|---|---|---|
| Wed 25 Feb · 21:41 UTC | Security Affairs | Zyxel fixes critical UPnP RCE affecting a dozen router models |
| Thu 26 Feb · 12:26 UTC | SecurityWeek | Zyxel patches critical UPnP RCE flaw in 18 routers and extenders |
- Zyxel patches critical UPnP RCE flaw in 18 routers and extendersSecurityWeek
- Zyxel fixes critical UPnP RCE affecting a dozen router modelsSecurity Affairs · first in our coverage