high8.8
CVE-2025-8693
A post-authentication command injection vulnerability in the "priv" parameter of Zyxel DX3300-T0 firmware version 5.50(ABVY.6.3)C0 and earlier could allow an a…
Impact
A post-authentication command injection vulnerability in the "priv" parameter of Zyxel DX3300-T0 firmware version 5.50(ABVY.6.3)C0 and earlier could allow an authenticated attacker to execute operating system (OS) commands on an affected device.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zyxel | Dm4200-B0 Firmware | through 5.17\(acbs.1.3\)c0 |
| Zyxel | Dx3300-T0 Firmware | through 5.50\(abvy.6.3\)c0 |
| Zyxel | Dx3300-T1 Firmware | through 5.50\(abvy.6.3\)c0 |
| Zyxel | Dx3301-T0 Firmware | through 5.50\(abvy.6.3\)c0 |
| Zyxel | Dx4510-B1 Firmware | through 5.17\(abyl.9\)c0 |
| Zyxel | Dx5401-B0 Firmware | through 5.17\(abyo.7\)b2 |
| Zyxel | Dx5401-B1 Firmware | through 5.17\(abyo.7\)b2 |
| Zyxel | Ee3301-00 Firmware | through 5.63\(acmu.1.1\)c0 |
| Zyxel | Ee5301-00 Firmware | through 5.63\(acld.1.1\)c0 |
| Zyxel | Ee6510-10 Firmware | through 5.19\(acjq.3\)c0 |
| Zyxel | Ex3300-T0 Firmware | through 5.50\(abvy.6.3\)c0 through 5.50\(acdi.2.1\)c0 |
| Zyxel | Ex3300-T1 Firmware | through 5.50\(abvy.6.3\)c0 |