CVE-2024-12009

🗓️ 11 Mar 2025 01:37:54Reported by ZyxelType

Post-authentication command injection in Zyxel EX5601-T1 firmware allows OS command execution.

Reporter	Title	Published	Views	Family All 9
BDU FSTEC	The vulnerability of ZyEE software in Wi-Fi amplifiers, subscriber terminals, DSL/Ethernet CPE routers allows a perpetrator to execute arbitrary commands.	30 Apr 202500:00	–	bdu_fstec
Circl	CVE-2024-12009	11 Mar 202505:05	–	circl
CNNVD	Zyxel EX5601-T1 操作系统命令注入漏洞	11 Mar 202500:00	–	cnnvd
Cvelist	CVE-2024-12009	11 Mar 202501:37	–	cvelist
EUVD	EUVD-2024-54137	3 Oct 202520:07	–	euvd
NVD	CVE-2024-12009	11 Mar 202502:15	–	nvd
OSV	CVE-2024-12009	11 Mar 202502:15	–	osv
RedhatCVE	CVE-2024-12009	13 Mar 202503:43	–	redhatcve
Vulnrichment	CVE-2024-12009	11 Mar 202501:37	–	vulnrichment

NVD

Node

zyxel dx3300-t0_firmwareRange≤5.50(abvy.5.4)c0

AND

zyxel dx3300-t0Match-

Node

zyxel dx3300-t1_firmwareRange≤5.50(abvy.5.4)c0

AND

zyxel dx3300-t1Match-

Node

zyxel dx3301-t0_firmwareRange≤5.50(abvy.5.4)c0

AND

zyxel dx3301-t0Match-

Node

zyxel dx4510-b0_firmwareRange≤5.17(abyl.8)c0

AND

zyxel dx4510-b0Match-

Node

zyxel dx4510-b1_firmwareRange≤5.17(abyl.8)c0

AND

zyxel dx4510-b1Match-

Node

zyxel dx5401-b0_firmwareRange≤5.17(abyo.6.4)c0

AND

zyxel dx5401-b0Match-

Node

zyxel dx5401-b1_firmwareRange≤5.17(abyo.6.4)c0

AND

zyxel dx5401-b1Match-

Node

zyxel ee6510-10_firmwareRange≤5.19(acjq.1)c1

AND

zyxel ee6510-10Match-

Node

zyxel ex3300-t0_firmwareRange≤5.50(abvy.5.4)c0

AND

zyxel ex3300-t0Match-

Node

zyxel ex3300-t1_firmwareRange≤5.50(abvy.5.4)c0

AND

zyxel ex3300-t1Match-

Node

zyxel ex3301-t0_firmwareRange≤5.50(abvy.5.4)c0

AND

zyxel ex3301-t0Match-

Node

zyxel ex3500-t0_firmwareRange≤5.44(achr.3)c0

AND

zyxel ex3500-t0Match-

Node

zyxel ex3501-t0_firmwareRange≤5.44(achr.3)c0

AND

zyxel ex3501-t0Match-

Node

zyxel ex3510-b0_firmwareRange≤5.17(abup.13)c0

AND

zyxel ex3510-b0Match-

Node

zyxel ex3510-b1_firmwareRange≤5.17(abup.13)c0

AND

zyxel ex3510-b1Match-

Node

zyxel ex3600-t0_firmwareRange≤5.70(acif.0.5)c0

AND

zyxel ex3600-t0Match-

Node

zyxel ex5401-b0_firmwareRange≤5.17(abyo.6.4)c0

AND

zyxel ex5401-b0Match-

Node

zyxel ex5401-b1_firmwareRange≤5.17(abyo.6.4)c0

AND

zyxel ex5401-b1Match-

Node

zyxel ex5501-b0_firmwareRange≤5.17(abry.5.3)c0

AND

zyxel ex5501-b0Match-

Node

zyxel ex5510-b0_firmwareRange≤5.17(abqx.10)c0

AND

zyxel ex5510-b0Match-

Node

zyxel ex5512-t0_firmwareRange≤5.70(aceg4.2)c0

AND

zyxel ex5512-t0Match-

Node

zyxel ex5601-t0_firmwareRange≤5.70(acdz.3.6)c0

AND

zyxel ex5601-t0Match-

Node

zyxel ex5601-t1_firmwareRange≤5.70(acdz.3.6)c0

AND

zyxel ex5601-t1Match-

Node

zyxel ex7501-b0_firmwareRange≤5.18(achn.1.3)c0

AND

zyxel ex7501-b0Match-

Node

zyxel ex7710-b0_firmwareRange≤5.18(acak.1.1)c1

AND

zyxel ex7710-b0Match-

Node

zyxel emg3525-t50b_firmwareRange≤5.50(abpm.9.3)c0

AND

zyxel emg3525-t50bMatch-

Node

zyxel emg5523-t50b_firmwareRange≤5.50(abpm.9.3)c0

AND

zyxel emg5523-t50bMatch-

Node

zyxel emg5723-t50k_firmwareRange≤5.50(abom.8.5)c0

AND

zyxel emg5723-t50kMatch-

Node

zyxel vmg3625-t50b_firmwareRange≤5.50(abpm.9.3)c0

AND

zyxel vmg3625-t50bMatch-

Node

zyxel vmg3927-t50k_firmwareRange≤5.50(abom.8.5)c0

AND

zyxel vmg3927-t50kMatch-

Node

zyxel vmg8623-t50b_firmwareRange≤5.50(abpm.9.3)c0

AND

zyxel vmg8623-t50bMatch-

Node

zyxel vmg8825-t50k_firmwareRange≤5.50(abom.8.5)c0

AND

zyxel vmg8825-t50kMatch-

Node

zyxel ax7501-b0_firmwareRange≤5.17(abpc.5.3)c0

AND

zyxel ax7501-b0Match-

Node

zyxel ax7501-b1_firmwareRange≤5.17(abpc.5.3)c0

AND

zyxel ax7501-b1Match-

Node

zyxel px3321-t1_firmwareRange≤5.44(acjb.1.1)c0

AND

zyxel px3321-t1Match-

Node

zyxel px5301-t0_firmwareRange≤5.44(ackb.0.1)c0

AND

zyxel px5301-t0Match-

Node

zyxel wx5600-t0_firmwareRange≤5.70(aceb.3.3)c0

AND

zyxel wx5600-t0Match-

Node

zyxel wx5610-b0_firmwareRange≤5.18(acgj.0.1)c0

AND

zyxel wx5610-b0Match-

[
  {
    "defaultStatus": "unaffected",
    "product": "EX5601-T1 firmware",
    "vendor": "Zyxel",
    "versions": [
      {
        "status": "affected",
        "version": "<=  V5.70(ACDZ.3.6)C0"
      }
    ]
  }
]

Source	Link
zyxel	www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-post-authentication-command-injection-vulnerabilities-in-certain-dsl-ethernet-cpe-fiber-ont-and-wifi-extender-devices-03-11-2025

13 Jan 2026 15:54Current

7.9High risk

Vulners AI Score7.9

CVSS 3.17.2

EPSS0.0034

SSVC

CWE-78