Not scored
CVE-2025-13943
Zyxel EX3301-T0 firmware vulnerability
ZyxelEX3301-T0 firmware
Status
- Not in CISA KEV
- Vendor fix available
Exploit probabilityEPSSchecked 25 Oct
1.6%probability of exploitation in the next 30 days
Higher than 75% of scored CVEs
SeverityCVSS
–Not scored yet
Description NVD
A post-authentication command injection vulnerability in the log file download function of the Zyxel EX3301-T0 firmware versions through 5.50(ABVY.7)C0 could allow an authenticated attacker to execute operating system (OS) commands on an affected device.
Coverage 2 articles · 2 outlets
See the full timelineShow as table
| Published (UTC) | Outlet | Headline |
|---|---|---|
| Wed 25 Feb · 21:41 UTC | Security Affairs | Zyxel fixes critical UPnP RCE affecting a dozen router models |
| Thu 26 Feb · 12:26 UTC | SecurityWeek | Zyxel patches critical UPnP RCE flaw in 18 routers and extenders |
- Zyxel patches critical UPnP RCE flaw in 18 routers and extendersSecurityWeek · mentions it in passing
- Zyxel fixes critical UPnP RCE affecting a dozen router modelsSecurity Affairs · first in our coverage · mentions it in passing