Read the docs

Zyxel

Records341All Threatist records
Exploited (KEV)13In CISA KEV
CVSS critical64CVSS 9.0–10.0
CVSS high136CVSS 7.0–8.9

Exploited now

Zyxel records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

21 records in Dx5401-b1 Firmware · all components

Priority MEDIUM 43

A post-authentication command injection vulnerability in the log file download function of the Zyxel EX3301-T0 firmware versions through 5.50(ABVY.7)C0 could allow an authenticated attacker to execute operating system (O…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01541 Published 2026-02-24 No fix listed CWE-78
Priority MEDIUM 42

A post-authentication command injection vulnerability in the "priv" parameter of Zyxel DX3300-T0 firmware version 5.50(ABVY.6.3)C0 and earlier could allow an authenticated attacker to execute operating system (OS) comman…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01046 Published 2025-11-18 No fix listed CWE-78
Priority MEDIUM 40

A buffer overflow vulnerability in the library "libclinkc" of the Zyxel VMG8825-T50K firmware version 5.50(ABOM.8)C0 could allow an unauthenticated attacker to cause denial of service (DoS) conditions by sending a crafte…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00662 Published 2024-09-03 No fix listed CWE-120
Priority LOW 39

An uncontrolled resource consumption vulnerability in the web server of Zyxel DX3301-T0 firmware version 5.50(ABVY.6.3)C0 and earlier could allow an attacker to perform Slowloris‑style denial‑of‑service (DoS) attacks.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00335 Published 2025-11-18 No fix listed CWE-400
Priority LOW 39

A buffer overflow vulnerability in the packet parser of the third-party library "libclinkc" in Zyxel VMG8825-T50K firmware versions through V5.50(ABOM.8.4)C0 could allow an attacker to cause a temporary denial of service…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0052 Published 2024-12-03 No fix listed CWE-120
Priority LOW 36

A post-authentication command injection vulnerability in the “DomainName” parameter of the DHCP configuration file in Zyxel DX3301-T0 and EX3301-T0 firmware versions through 5.50(ABVY.7.1)C0 could allow an authenticated…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01157 Published 2026-04-28 No fix listed CWE-78
Priority LOW 36

A post-authentication command injection vulnerability in the ”zyUtilMailSend” function of the Zyxel AX7501-B1 firmware version V5.17(ABPC.5.3)C0 and earlier could allow an authenticated attacker with administrator privil…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01081 Published 2025-03-11 No fix listed CWE-78
Priority LOW 36

A post-authentication command injection vulnerability in the "ZyEE" function of the Zyxel EX5601-T1 firmware version V5.70(ACDZ.3.6)C0 and earlier could allow an authenticated attacker with administrator privileges to ex…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01081 Published 2025-03-11 No fix listed CWE-78
Priority LOW 35

A post-authentication command injection vulnerability in the TR-369 certificate download CGI program of the Zyxel VMG3625-T50B firmware versions through 5.50(ABPM.9.7)C0 could allow an authenticated attacker with adminis…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00955 Published 2026-02-24 No fix listed CWE-78
Priority LOW 34

A post-authentication command injection vulnerability in the EasyMesh-related APIs of Zyxel DX3300-T0 firmware versions through 5.50(ABVY.7.1)C0 could allow an authenticated, adjacent attacker with administrator privileg…

CVSS 3.1MEDIUM 6.8 Adjacent network High privileges No interaction EPSS 0.00849 Published 2026-04-28 No fix listed CWE-78
TI-2023-19362 CVE-2023-37929 · GHSA-2c72-646m-c23c

Buffer overflow in Zyxel V5.50 C0 firmware

Priority LOW 30

The buffer overflow vulnerability in the CGI program of the VMG3625-T50B firmware version V5.50(ABPM.8)C0 could allow an authenticated remote attacker to cause denial of service (DoS) conditions by sending a crafted HTTP…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00545 Published 2024-05-21 No fix listed CWE-120
Priority LOW 27

A null pointer dereference vulnerability in the Wake-on-LAN CGI program of the Zyxel VMG3625-T50B firmware version through 5.50(ABPM.9.6)C0 and the Zyxel WX3100-T0 firmware versions through 5.50(ABVL.4.8)C0 could allow a…

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.02079 Published 2026-02-24 No fix listed CWE-476
Priority LOW 26

A null pointer dereference vulnerability in the IP settings CGI program of the Zyxel VMG3625-T50B firmware versions through 5.50(ABPM.9.6)C0 and the Zyxel WX3100-T0 firmware versions through 5.50(ABVL.4.8)C0 could allow…

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01916 Published 2026-02-24 No fix listed CWE-476
Priority LOW 25

A null pointer dereference vulnerability in the account settings CGI program of the Zyxel VMG3625-T50B firmware versions through 5.50(ABPM.9.6)C0 and the Zyxel WX3100-T0 firmware versions through 5.50(ABVL.4.8)C0 could a…

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01305 Published 2026-02-24 No fix listed CWE-476
Priority LOW 24

A null pointer dereference vulnerability in the certificate downloader CGI program of the Zyxel VMG3625-T50B firmware versions through 5.50(ABPM.9.6)C0 and the Zyxel WX3100-T0 firmware versions through 5.50(ABVL.4.8)C0 c…

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00872 Published 2026-02-24 No fix listed CWE-476
Priority LOW 24

The buffer overflow vulnerability in the DX3300-T1 firmware version V5.50(ABVY.4)C0 could allow an authenticated local attacker to cause denial of service (DoS) conditions by executing the CLI command with crafted string…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00145 Published 2024-05-21 No fix listed CWE-120
Priority LOW 23

An improper restriction of operations within the bounds of a memory buffer in the USB file-sharing handler of the Zyxel VMG8825-T50K firmware versions through 5.50(ABOM.8)C0 could allow an authenticated attacker with adm…

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00431 Published 2024-09-24 No fix listed CWE-119
Priority LOW 23

An improper restriction of operations within the bounds of a memory buffer in the MAC address parser of the Zyxel VMG8825-T50K firmware versions through 5.50(ABOM.8)C0 could allow an authenticated attacker with administr…

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00431 Published 2024-09-24 No fix listed CWE-119
Priority LOW 23

An improper restriction of operations within the bounds of a memory buffer in the IPv6 address parser of the Zyxel VMG8825-T50K firmware versions through 5.50(ABOM.8)C0 could allow an authenticated attacker with administ…

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00431 Published 2024-09-24 No fix listed CWE-119
Priority LOW 23

An improper restriction of operations within the bounds of a memory buffer in the parameter type parser of the Zyxel VMG8825-T50K firmware versions through 5.50(ABOM.8)C0 could allow an authenticated attacker with admini…

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00431 Published 2024-09-24 No fix listed CWE-119
Priority LOW 23

A post-authentication buffer overflow vulnerability in the parameter "action" of the CGI program in Zyxel VMG3625-T50B firmware versions through V5.50(ABPM.9.2)C0 could allow an authenticated attacker with administrator…

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.0051 Published 2024-12-03 No fix listed CWE-120
Open these records in search →