critical9.8
CVE-2025-13942
A command injection vulnerability in the UPnP function of the Zyxel EX3510-B0 firmware versions through 5.17(ABUP.15.1)C0 could allow a remote attacker to exec…
Impact
A command injection vulnerability in the UPnP function of the Zyxel EX3510-B0 firmware versions through 5.17(ABUP.15.1)C0 could allow a remote attacker to execute operating system (OS) commands on an affected device by sending specially crafted UPnP SOAP requests.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zyxel | Wx5610-B0 Firmware | before 5.18\(acgj.0.5\)c0 |
| Zyxel | Lte3301-Plus Firmware | before 1.00\(abqu.9\)c0 |
| Zyxel | Nebula Lte3301-Plus Firmware | before 1.18\(acca.6\)v0 |
| Zyxel | Nr7101 Firmware | before 1.00\(abuv.12\)b2 |
| Zyxel | Nebula Nr7101 Firmware | before 1.16\(accc.1\)v0 |
| Zyxel | Dx4510-B0 Firmware | before 5.17\(abyl.10.1\)c0 |
| Zyxel | Dx4510-B1 Firmware | before 5.17\(abyl.10.1\)c0 |
| Zyxel | Ee6510-10 Firmware | before 5.19\(acjq.4.1\)c0 |
| Zyxel | Emg6726-B10a Firmware | before 5.13\(abnp.8.2\)c1 |
| Zyxel | Ex2210-T0 Firmware | before 5.50\(acdi.2.4\)c0 |
| Zyxel | Ex3510-B0 Firmware | before 5.17\(abup.15.2\)c0 |
| Zyxel | Ex3510-B1 Firmware | before 5.17\(abup.15.2\)c0 |