CVE-2025-13942

🗓️ 24 Feb 2026 02:32:18Reported by ZyxelType

cve🔗 web.nvd.nist.gov📰️ 5 Media mentions👁 46 Views

CVE-2025-13942 UPnP command injection in Zyxel EX3510-B0 firmware through 5.17(ABUP.15.1)C0 enables remote command execution.

Reporter	Title	Published	Views	Family All 12
BDU FSTEC	The vulnerability of the UPnP protocol implementation in Zyxel network devices allows a hacker to execute arbitrary code.	25 Feb 202600:00	–	bdu_fstec
Circl	CVE-2025-13942	24 Feb 202604:01	–	circl
CNNVD	Zyxel EX3510-B0 操作系统命令注入漏洞	24 Feb 202600:00	–	cnnvd
CNVD	Zyxel EX3510-B0 UPnP command injection vulnerability	2 Mar 202600:00	–	cnvd
Cvelist	CVE-2025-13942	24 Feb 202602:32	–	cvelist
EUVD	EUVD-2025-207551	24 Feb 202602:32	–	euvd
NVD	CVE-2025-13942	24 Feb 202603:16	–	nvd
OSV	CVE-2025-13942	24 Feb 202603:16	–	osv
Positive Technologies	PT-2026-21643	24 Feb 202600:00	–	ptsecurity
RedhatCVE	CVE-2025-13942	25 Feb 202604:06	–	redhatcve

NVD

Node

AND

zyxel wx5610-b0_firmwareRange<5.18(acgj.0.5)c0

zyxel wx5610-b0Match-

Node

AND

zyxel lte3301-plus_firmwareRange<1.00(abqu.9)c0

zyxel lte3301-plusMatch-

Node

AND

zyxel nebula_lte3301-plus_firmwareRange<1.18(acca.6)v0

zyxel nebula_lte3301-plusMatch-

Node

AND

zyxel nr7101_firmwareRange<1.00(abuv.12)b2

zyxel nr7101Match-

Node

AND

zyxel nebula_nr7101_firmwareRange<1.16(accc.1)v0

zyxel nebula_nr7101Match-

Node

AND

zyxel dx4510-b0_firmwareRange<5.17(abyl.10.1)c0

zyxel dx4510-b0Match-

Node

AND

zyxel dx4510-b1_firmwareRange<5.17(abyl.10.1)c0

zyxel dx4510-b1Match-

Node

AND

zyxel ee6510-10_firmwareRange<5.19(acjq.4.1)c0

zyxel ee6510-10Match-

Node

AND

zyxel emg6726-b10a_firmwareRange<5.13(abnp.8.2)c1

zyxel emg6726-b10aMatch-

Node

AND

zyxel ex2210-t0_firmwareRange<5.50(acdi.2.4)c0

zyxel ex2210-t0Match-

Node

AND

zyxel ex3510-b0_firmwareRange<5.17(abup.15.2)c0

zyxel ex3510-b0Match-

Node

AND

zyxel ex3510-b1_firmwareRange<5.17(abup.15.2)c0

zyxel ex3510-b1Match-

Node

AND

zyxel ex5510-b0_firmwareRange<5.17(abqx.11.1)c0

zyxel ex5510-b0Match-

Node

AND

zyxel ex5512-t0_firmwareRange<5.70(aceg.5.4)c0

zyxel ex5512-t0Match-

Node

AND

zyxel ex7710-b0_firmwareRange<5.18(acak.1.6)c0

zyxel ex7710-b0Match-

Node

AND

zyxel vmg4927-b50a_firmwareRange<5.13(ably.10.2)c0

zyxel vmg4927-b50aMatch-

Node

AND

zyxel px3321-t1_firmwareRange<5.44(acjb.1.5)c0

zyxel px3321-t1Match-

Node

AND

zyxel px3321-t1_firmwareRange<5.44(achk.3)c0

zyxel px3321-t1Match-

Node

AND

zyxel px5301-t0_firmwareRange<5.44(ackb.0.6)c0

zyxel px5301-t0Match-

[
  {
    "defaultStatus": "unaffected",
    "product": "EX3510-B0 firmware",
    "vendor": "Zyxel",
    "versions": [
      {
        "status": "affected",
        "version": "<= 5.17(ABUP.15.1)C0"
      }
    ]
  }
]

Source	Link
zyxel	www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-null-pointer-dereference-and-command-injection-vulnerabilities-in-certain-4g-lte-5g-nr-cpe-dsl-ethernet-cpe-fiber-onts-security-routers-and-wireless-extenders-02-24-2026

17 Jun 2026 08:35Current

5.9Medium risk

Vulners AI Score5.9

CVSS 3.19.8

EPSS0.0106

SSVC

CWE-78