Read the docs

Zyxel

Records341All Threatist records
Exploited (KEV)13In CISA KEV
CVSS critical64CVSS 9.0–10.0
CVSS high136CVSS 7.0–8.9

Exploited now

Zyxel records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

22 records in Dx5401-b0 Firmware · all components

Priority HIGH 72

The sensitive information exposure vulnerability in the CGI “Export_Log” and the binary “zcmd” in Zyxel DX5401-B0 firmware versions prior to V5.17(ABYO.1)C0 could allow a remote unauthenticated attacker to read the syste…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.57778 Published 2023-04-27 Fixed in V5.17(ABYO.1)C0 CWE-200
TI-2023-13279 CVE-2023-28769 · GHSA-xg39-26cw-gxj9

Buffer overflow in Zyxel DX5401-B0 firmware

Priority MEDIUM 57

The buffer overflow vulnerability in the library “libclinkc.so” of the web server “zhttpd” in Zyxel DX5401-B0 firmware versions prior to V5.17(ABYO.1)C0 could allow a remote unauthenticated attacker to execute some OS co…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0542 Published 2023-04-27 Fixed in V5.17(ABYO.1)C0 CWE-120
Priority MEDIUM 42

A post-authentication command injection vulnerability in the "priv" parameter of Zyxel DX3300-T0 firmware version 5.50(ABVY.6.3)C0 and earlier could allow an authenticated attacker to execute operating system (OS) comman…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01046 Published 2025-11-18 No fix listed CWE-78
Priority MEDIUM 42

A command injection vulnerability in the CGI program of Zyxel NR7101 firmware prior to V1.15(ACCC.3)C0, which could allow an authenticated attacker to execute some OS commands on a vulnerable device by sending a crafted…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01123 Published 2023-01-11 Fixed in V1.15(ACCC.3)C0 CWE-78
Priority MEDIUM 40

A buffer overflow vulnerability in the library "libclinkc" of the Zyxel VMG8825-T50K firmware version 5.50(ABOM.8)C0 could allow an unauthenticated attacker to cause denial of service (DoS) conditions by sending a crafte…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00662 Published 2024-09-03 No fix listed CWE-120
Priority LOW 39

An uncontrolled resource consumption vulnerability in the web server of Zyxel DX3301-T0 firmware version 5.50(ABVY.6.3)C0 and earlier could allow an attacker to perform Slowloris‑style denial‑of‑service (DoS) attacks.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00335 Published 2025-11-18 No fix listed CWE-400
Priority LOW 39

A buffer overflow vulnerability in the packet parser of the third-party library "libclinkc" in Zyxel VMG8825-T50K firmware versions through V5.50(ABOM.8.4)C0 could allow an attacker to cause a temporary denial of service…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0052 Published 2024-12-03 No fix listed CWE-120
Priority LOW 36

A post-authentication command injection vulnerability in the ”zyUtilMailSend” function of the Zyxel AX7501-B1 firmware version V5.17(ABPC.5.3)C0 and earlier could allow an authenticated attacker with administrator privil…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01081 Published 2025-03-11 No fix listed CWE-78
Priority LOW 36

A post-authentication command injection vulnerability in the "ZyEE" function of the Zyxel EX5601-T1 firmware version V5.70(ACDZ.3.6)C0 and earlier could allow an authenticated attacker with administrator privileges to ex…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01081 Published 2025-03-11 No fix listed CWE-78
Priority LOW 36

A command injection vulnerability in the CGI program of Zyxel VMG3312-T20A firmware version 5.30(ABFX.5)C0 could allow a local authenticated attacker to execute arbitrary OS commands on a vulnerable device via a LAN inte…

CVSS 3.1HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.00696 Published 2022-04-11 No fix listed CWE-78
Priority LOW 34

A post-authentication command injection vulnerability in the EasyMesh-related APIs of Zyxel DX3300-T0 firmware versions through 5.50(ABVY.7.1)C0 could allow an authenticated, adjacent attacker with administrator privileg…

CVSS 3.1MEDIUM 6.8 Adjacent network High privileges No interaction EPSS 0.00849 Published 2026-04-28 No fix listed CWE-78
TI-2023-19362 CVE-2023-37929 · GHSA-2c72-646m-c23c

Buffer overflow in Zyxel V5.50 C0 firmware

Priority LOW 30

The buffer overflow vulnerability in the CGI program of the VMG3625-T50B firmware version V5.50(ABPM.8)C0 could allow an authenticated remote attacker to cause denial of service (DoS) conditions by sending a crafted HTTP…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00545 Published 2024-05-21 No fix listed CWE-120
TI-2022-21190 CVE-2022-43392 · GHSA-9g4h-h3jx-fcjh

Buffer overflow in Zyxel NR7101 firmware

Priority LOW 30

A buffer overflow vulnerability in the parameter of web server in Zyxel NR7101 firmware prior to V1.15(ACCC.3)C0, which could allow an authenticated attacker to cause denial-of-service (DoS) conditions by sending a craft…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00642 Published 2023-01-11 Fixed in V1.15(ACCC.3)C0 CWE-120
TI-2022-21189 CVE-2022-43391 · GHSA-6fjf-x8wx-cw7h

Buffer overflow in Zyxel NR7101 firmware

Priority LOW 30

A buffer overflow vulnerability in the parameter of the CGI program in Zyxel NR7101 firmware prior to V1.15(ACCC.3)C0, which could allow an authenticated attacker to cause denial-of-service (DoS) conditions by sending a…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00748 Published 2023-01-11 Fixed in V1.15(ACCC.3)C0 CWE-120
Priority LOW 29

A cleartext storage of information vulnerability in the Zyxel VMG3625-T50B firmware version V5.50(ABTL.0)b2k could allow an authenticated attacker to obtain sensitive information from the configuration file.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00488 Published 2022-03-01 No fix listed CWE-312
Priority LOW 26

A potential buffer overflow vulnerability was identified in some internal functions of Zyxel VMG3312-T20A firmware version 5.30(ABFX.5)C0, which could be exploited by a local authenticated attacker to cause a denial of s…

CVSS 3.1MEDIUM 6.0 Local High privileges No interaction EPSS 0.00208 Published 2022-04-11 No fix listed CWE-120
Priority LOW 24

The buffer overflow vulnerability in the DX3300-T1 firmware version V5.50(ABVY.4)C0 could allow an authenticated local attacker to cause denial of service (DoS) conditions by executing the CLI command with crafted string…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00145 Published 2024-05-21 No fix listed CWE-120
Priority LOW 23

An improper restriction of operations within the bounds of a memory buffer in the USB file-sharing handler of the Zyxel VMG8825-T50K firmware versions through 5.50(ABOM.8)C0 could allow an authenticated attacker with adm…

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00431 Published 2024-09-24 No fix listed CWE-119
Priority LOW 23

An improper restriction of operations within the bounds of a memory buffer in the MAC address parser of the Zyxel VMG8825-T50K firmware versions through 5.50(ABOM.8)C0 could allow an authenticated attacker with administr…

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00431 Published 2024-09-24 No fix listed CWE-119
Priority LOW 23

An improper restriction of operations within the bounds of a memory buffer in the IPv6 address parser of the Zyxel VMG8825-T50K firmware versions through 5.50(ABOM.8)C0 could allow an authenticated attacker with administ…

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00431 Published 2024-09-24 No fix listed CWE-119
Priority LOW 23

An improper restriction of operations within the bounds of a memory buffer in the parameter type parser of the Zyxel VMG8825-T50K firmware versions through 5.50(ABOM.8)C0 could allow an authenticated attacker with admini…

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00431 Published 2024-09-24 No fix listed CWE-119
Priority LOW 23

A post-authentication buffer overflow vulnerability in the parameter "action" of the CGI program in Zyxel VMG3625-T50B firmware versions through V5.50(ABPM.9.2)C0 could allow an authenticated attacker with administrator…

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.0051 Published 2024-12-03 No fix listed CWE-120
Open these records in search →