CVE-2025-13942

🗓️ 24 Feb 2026 02:32:18Reported by ZyxelType

cve🔗 web.nvd.nist.gov📰️ 5 Media mentions👁 19 Views

CVE-2025-13942 UPnP command injection in Zyxel EX3510-B0 firmware through 5.17(ABUP.15.1)C0 enables remote command execution.

Reporter	Title	Published	Views	Family All 9
Circl	CVE-2025-13942	24 Feb 202604:01	–	circl
CNNVD	Zyxel EX3510-B0 操作系统命令注入漏洞	24 Feb 202600:00	–	cnnvd
Cvelist	CVE-2025-13942	24 Feb 202602:32	–	cvelist
EUVD	EUVD-2025-207551	24 Feb 202602:32	–	euvd
NVD	CVE-2025-13942	24 Feb 202603:16	–	nvd
Positive Technologies	PT-2026-21643	24 Feb 202600:00	–	ptsecurity
RedhatCVE	CVE-2025-13942	25 Feb 202604:06	–	redhatcve
The Hacker News	⚡ Weekly Recap: SD-WAN 0-Day, Critical CVEs, Telegram Probe, Smart TV Proxy SDK and More	2 Mar 202613:26	–	thn
Vulnrichment	CVE-2025-13942	24 Feb 202602:32	–	vulnrichment

NVD

Node

zyxel wx5610-b0_firmwareRange<5.18(acgj.0.5)c0

AND

zyxel wx5610-b0Match-

Node

zyxel lte3301-plus_firmwareRange<1.00(abqu.9)c0

AND

zyxel lte3301-plusMatch-

Node

zyxel nebula_lte3301-plus_firmwareRange<1.18(acca.6)v0

AND

zyxel nebula_lte3301-plusMatch-

Node

zyxel nr7101_firmwareRange<1.00(abuv.12)b2

AND

zyxel nr7101Match-

Node

zyxel nebula_nr7101_firmwareRange<1.16(accc.1)v0

AND

zyxel nebula_nr7101Match-

Node

zyxel dx4510-b0_firmwareRange<5.17(abyl.10.1)c0

AND

zyxel dx4510-b0Match-

Node

zyxel dx4510-b1_firmwareRange<5.17(abyl.10.1)c0

AND

zyxel dx4510-b1Match-

Node

zyxel ee6510-10_firmwareRange<5.19(acjq.4.1)c0

AND

zyxel ee6510-10Match-

Node

zyxel emg6726-b10a_firmwareRange<5.13(abnp.8.2)c1

AND

zyxel emg6726-b10aMatch-

Node

zyxel ex2210-t0_firmwareRange<5.50(acdi.2.4)c0

AND

zyxel ex2210-t0Match-

Node

zyxel ex3510-b0_firmwareRange<5.17(abup.15.2)c0

AND

zyxel ex3510-b0Match-

Node

zyxel ex3510-b1_firmwareRange<5.17(abup.15.2)c0

AND

zyxel ex3510-b1Match-

Node

zyxel ex5510-b0_firmwareRange<5.17(abqx.11.1)c0

AND

zyxel ex5510-b0Match-

Node

zyxel ex5512-t0_firmwareRange<5.70(aceg.5.4)c0

AND

zyxel ex5512-t0Match-

Node

zyxel ex7710-b0_firmwareRange<5.18(acak.1.6)c0

AND

zyxel ex7710-b0Match-

Node

zyxel vmg4927-b50a_firmwareRange<5.13(ably.10.2)c0

AND

zyxel vmg4927-b50aMatch-

Node

zyxel px3321-t1_firmwareRange<5.44(acjb.1.5)c0

AND

zyxel px3321-t1Match-

Node

zyxel px3321-t1_firmwareRange<5.44(achk.3)c0

AND

zyxel px3321-t1Match-

Node

zyxel px5301-t0_firmwareRange<5.44(ackb.0.6)c0

AND

zyxel px5301-t0Match-

[
  {
    "defaultStatus": "unaffected",
    "product": "EX3510-B0 firmware",
    "vendor": "Zyxel",
    "versions": [
      {
        "status": "affected",
        "version": "<= 5.17(ABUP.15.1)C0"
      }
    ]
  }
]

Source	Link
zyxel	www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-null-pointer-dereference-and-command-injection-vulnerabilities-in-certain-4g-lte-5g-nr-cpe-dsl-ethernet-cpe-fiber-onts-security-routers-and-wireless-extenders-02-24-2026

25 Feb 2026 18:13Current

5.9Medium risk

Vulners AI Score5.9

CVSS 3.19.8

EPSS0.00181

SSVC

CWE-78