CVE-2025-13942

🗓️ 24 Feb 2026 03:16:00Reported by [email protected]Type

Command injection in Zyxel EX3510-B0 UPnP enables remote OS command execution via crafted SOAP requests.

Reporter	Title	Published	Views	Family All 12
BDU FSTEC	The vulnerability of the UPnP protocol implementation in Zyxel network devices allows a hacker to execute arbitrary code.	25 Feb 202600:00	–	bdu_fstec
Circl	CVE-2025-13942	24 Feb 202604:01	–	circl
CNNVD	Zyxel EX3510-B0 操作系统命令注入漏洞	24 Feb 202600:00	–	cnnvd
CNVD	Zyxel EX3510-B0 UPnP command injection vulnerability	2 Mar 202600:00	–	cnvd
CVE	CVE-2025-13942	24 Feb 202602:32	–	cve
Cvelist	CVE-2025-13942	24 Feb 202602:32	–	cvelist
EUVD	EUVD-2025-207551	24 Feb 202602:32	–	euvd
OSV	CVE-2025-13942	24 Feb 202603:16	–	osv
Positive Technologies	PT-2026-21643	24 Feb 202600:00	–	ptsecurity
RedhatCVE	CVE-2025-13942	25 Feb 202604:06	–	redhatcve

NVD

Node

AND

zyxel wx5610-b0_firmwareRange<5.18(acgj.0.5)c0

zyxel wx5610-b0Match-

Node

AND

zyxel lte3301-plus_firmwareRange<1.00(abqu.9)c0

zyxel lte3301-plusMatch-

Node

AND

zyxel nebula_lte3301-plus_firmwareRange<1.18(acca.6)v0

zyxel nebula_lte3301-plusMatch-

Node

AND

zyxel nr7101_firmwareRange<1.00(abuv.12)b2

zyxel nr7101Match-

Node

AND

zyxel nebula_nr7101_firmwareRange<1.16(accc.1)v0

zyxel nebula_nr7101Match-

Node

AND

zyxel dx4510-b0_firmwareRange<5.17(abyl.10.1)c0

zyxel dx4510-b0Match-

Node

AND

zyxel dx4510-b1_firmwareRange<5.17(abyl.10.1)c0

zyxel dx4510-b1Match-

Node

AND

zyxel ee6510-10_firmwareRange<5.19(acjq.4.1)c0

zyxel ee6510-10Match-

Node

AND

zyxel emg6726-b10a_firmwareRange<5.13(abnp.8.2)c1

zyxel emg6726-b10aMatch-

Node

AND

zyxel ex2210-t0_firmwareRange<5.50(acdi.2.4)c0

zyxel ex2210-t0Match-

Node

AND

zyxel ex3510-b0_firmwareRange<5.17(abup.15.2)c0

zyxel ex3510-b0Match-

Node

AND

zyxel ex3510-b1_firmwareRange<5.17(abup.15.2)c0

zyxel ex3510-b1Match-

Node

AND

zyxel ex5510-b0_firmwareRange<5.17(abqx.11.1)c0

zyxel ex5510-b0Match-

Node

AND

zyxel ex5512-t0_firmwareRange<5.70(aceg.5.4)c0

zyxel ex5512-t0Match-

Node

AND

zyxel ex7710-b0_firmwareRange<5.18(acak.1.6)c0

zyxel ex7710-b0Match-

Node

AND

zyxel vmg4927-b50a_firmwareRange<5.13(ably.10.2)c0

zyxel vmg4927-b50aMatch-

Node

AND

zyxel px3321-t1_firmwareRange<5.44(acjb.1.5)c0

zyxel px3321-t1Match-

Node

AND

zyxel px3321-t1_firmwareRange<5.44(achk.3)c0

zyxel px3321-t1Match-

Node

AND

zyxel px5301-t0_firmwareRange<5.44(ackb.0.6)c0

zyxel px5301-t0Match-

Source	Link
zyxel	www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-null-pointer-dereference-and-command-injection-vulnerabilities-in-certain-4g-lte-5g-nr-cpe-dsl-ethernet-cpe-fiber-onts-security-routers-and-wireless-extenders-02-24-2026

17 Jun 2026 08:35Current

CVSS 3.19.8

EPSS0.0106

CWE-78