Read the docs

Zyxel

Records341All Threatist records
Exploited (KEV)13In CISA KEV
CVSS critical64CVSS 9.0–10.0
CVSS high136CVSS 7.0–8.9

Exploited now

Zyxel records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

19 records in Ax7501-b0 Firmware · all components

Priority MEDIUM 42

A post-authentication command injection vulnerability in the "priv" parameter of Zyxel DX3300-T0 firmware version 5.50(ABVY.6.3)C0 and earlier could allow an authenticated attacker to execute operating system (OS) comman…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01046 Published 2025-11-18 No fix listed CWE-78
Priority MEDIUM 42

A command injection vulnerability in the CGI program of Zyxel NR7101 firmware prior to V1.15(ACCC.3)C0, which could allow an authenticated attacker to execute some OS commands on a vulnerable device by sending a crafted…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01123 Published 2023-01-11 Fixed in V1.15(ACCC.3)C0 CWE-78
Priority MEDIUM 40

A buffer overflow vulnerability in the library "libclinkc" of the Zyxel VMG8825-T50K firmware version 5.50(ABOM.8)C0 could allow an unauthenticated attacker to cause denial of service (DoS) conditions by sending a crafte…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00662 Published 2024-09-03 No fix listed CWE-120
Priority LOW 39

An uncontrolled resource consumption vulnerability in the web server of Zyxel DX3301-T0 firmware version 5.50(ABVY.6.3)C0 and earlier could allow an attacker to perform Slowloris‑style denial‑of‑service (DoS) attacks.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00335 Published 2025-11-18 No fix listed CWE-400
Priority LOW 39

A buffer overflow vulnerability in the packet parser of the third-party library "libclinkc" in Zyxel VMG8825-T50K firmware versions through V5.50(ABOM.8.4)C0 could allow an attacker to cause a temporary denial of service…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0052 Published 2024-12-03 No fix listed CWE-120
Priority LOW 36

A post-authentication command injection vulnerability in the ”zyUtilMailSend” function of the Zyxel AX7501-B1 firmware version V5.17(ABPC.5.3)C0 and earlier could allow an authenticated attacker with administrator privil…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01081 Published 2025-03-11 No fix listed CWE-78
Priority LOW 36

A post-authentication command injection vulnerability in the "ZyEE" function of the Zyxel EX5601-T1 firmware version V5.70(ACDZ.3.6)C0 and earlier could allow an authenticated attacker with administrator privileges to ex…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01081 Published 2025-03-11 No fix listed CWE-78
Priority LOW 36

A command injection vulnerability in the CGI program of Zyxel VMG3312-T20A firmware version 5.30(ABFX.5)C0 could allow a local authenticated attacker to execute arbitrary OS commands on a vulnerable device via a LAN inte…

CVSS 3.1HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.00696 Published 2022-04-11 No fix listed CWE-78
Priority LOW 34

A post-authentication command injection vulnerability in the EasyMesh-related APIs of Zyxel DX3300-T0 firmware versions through 5.50(ABVY.7.1)C0 could allow an authenticated, adjacent attacker with administrator privileg…

CVSS 3.1MEDIUM 6.8 Adjacent network High privileges No interaction EPSS 0.00849 Published 2026-04-28 No fix listed CWE-78
TI-2023-19362 CVE-2023-37929 · GHSA-2c72-646m-c23c

Buffer overflow in Zyxel V5.50 C0 firmware

Priority LOW 30

The buffer overflow vulnerability in the CGI program of the VMG3625-T50B firmware version V5.50(ABPM.8)C0 could allow an authenticated remote attacker to cause denial of service (DoS) conditions by sending a crafted HTTP…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00545 Published 2024-05-21 No fix listed CWE-120
TI-2022-21190 CVE-2022-43392 · GHSA-9g4h-h3jx-fcjh

Buffer overflow in Zyxel NR7101 firmware

Priority LOW 30

A buffer overflow vulnerability in the parameter of web server in Zyxel NR7101 firmware prior to V1.15(ACCC.3)C0, which could allow an authenticated attacker to cause denial-of-service (DoS) conditions by sending a craft…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00642 Published 2023-01-11 Fixed in V1.15(ACCC.3)C0 CWE-120
TI-2022-21189 CVE-2022-43391 · GHSA-6fjf-x8wx-cw7h

Buffer overflow in Zyxel NR7101 firmware

Priority LOW 30

A buffer overflow vulnerability in the parameter of the CGI program in Zyxel NR7101 firmware prior to V1.15(ACCC.3)C0, which could allow an authenticated attacker to cause denial-of-service (DoS) conditions by sending a…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00748 Published 2023-01-11 Fixed in V1.15(ACCC.3)C0 CWE-120
Priority LOW 29

A cleartext storage of information vulnerability in the Zyxel VMG3625-T50B firmware version V5.50(ABTL.0)b2k could allow an authenticated attacker to obtain sensitive information from the configuration file.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00488 Published 2022-03-01 No fix listed CWE-312
Priority LOW 28

A pair of spare WiFi credentials is stored in the configuration file of the Zyxel AX7501-B0 firmware prior to V5.17(ABPC.3)C0 in cleartext.

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00201 Published 2023-01-17 Fixed in V5.17(ABPC.3)C0 CWE-312
Priority LOW 26

A potential buffer overflow vulnerability was identified in some internal functions of Zyxel VMG3312-T20A firmware version 5.30(ABFX.5)C0, which could be exploited by a local authenticated attacker to cause a denial of s…

CVSS 3.1MEDIUM 6.0 Local High privileges No interaction EPSS 0.00208 Published 2022-04-11 No fix listed CWE-120
Priority LOW 24

The buffer overflow vulnerability in the DX3300-T1 firmware version V5.50(ABVY.4)C0 could allow an authenticated local attacker to cause denial of service (DoS) conditions by executing the CLI command with crafted string…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00145 Published 2024-05-21 No fix listed CWE-120
Priority LOW 23

An improper restriction of operations within the bounds of a memory buffer in the parameter type parser of the Zyxel VMG8825-T50K firmware versions through 5.50(ABOM.8)C0 could allow an authenticated attacker with admini…

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00431 Published 2024-09-24 No fix listed CWE-119
Priority LOW 23

A post-authentication buffer overflow vulnerability in the parameter "action" of the CGI program in Zyxel VMG3625-T50B firmware versions through V5.50(ABPM.9.2)C0 could allow an authenticated attacker with administrator…

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.0051 Published 2024-12-03 No fix listed CWE-120
TI-2022-22406 CVE-2022-45440 · GHSA-rpwq-xw4m-459x

Link following in Zyxel AX7501-B0 firmware

Priority LOW 20

A vulnerability exists in the FTP server of the Zyxel AX7501-B0 firmware prior to V5.17(ABPC.3)C0, which processes symbolic links on external storage media.

CVSS 3.1MEDIUM 4.4 Local High privileges No interaction EPSS 0.00249 Published 2023-01-17 Fixed in V5.17(ABPC.3)C0 CWE-59
Open these records in search →