Lucene search
+L

66 matches found

Positive Technologies
Positive Technologies
added 2026/02/24 12:0 a.m.7 views

PT-2026-21642

A null pointer dereference vulnerability in the Wake-on-LAN CGI program of the Zyxel VMG3625-T50B firmware version through 5.50ABPM.9.6C0 and the Zyxel WX3100-T0 firmware versions through 5.50ABVL.4.8C0 could allow an authenticated attacker with administrator privileges to trigger a...

4.9CVSS5.5AI score0.01847EPSS
Exploits0References2
CNNVD
CNNVD
added 2026/02/24 12:0 a.m.13 views

Zyxel VMG3625-T50B和Zyxel WX3100-T0 代码问题漏洞

Both Zyxel VMG3625-T50B and Zyxel WX3100-T0 are products of the Chinese company Zyxel. Zyxel VMG3625-T50B is a Wi-Fi device. Zyxel WX3100-T0 is a wireless bridge. There are code vulnerabilities in versions of Zyxel VMG3625-T50B 5.50ABPM.9.6C0 and earlier, as well as Zyxel WX3100-T0 5.50ABVL.4.8C0...

4.9CVSS5.9AI score0.01702EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/02/24 12:0 a.m.8 views

Zyxel VMG3625-T50B和Zyxel WX3100-T0 代码问题漏洞

Both Zyxel VMG3625-T50B and Zyxel WX3100-T0 are products of the Chinese company Zyxel. Zyxel VMG3625-T50B is a Wi-Fi device. Zyxel WX3100-T0 is a wireless bridge. There are code vulnerabilities in versions of Zyxel VMG3625-T50B 5.50ABPM.9.6C0 and earlier, as well as Zyxel WX3100-T0 5.50ABVL.4.8C0...

4.9CVSS5.9AI score0.01124EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/02/24 12:0 a.m.10 views

Zyxel VMG3625-T50B和Zyxel WX3100-T0 代码问题漏洞

Both Zyxel VMG3625-T50B and Zyxel WX3100-T0 are products of the Chinese company Zyxel. Zyxel VMG3625-T50B is a Wi-Fi device. Zyxel WX3100-T0 is a wireless bridge. There are code vulnerabilities in versions of Zyxel VMG3625-T50B 5.50ABPM.9.6C0 and earlier, as well as Zyxel WX3100-T0 5.50ABVL.4.8C0...

4.9CVSS5.9AI score0.00782EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/02/24 12:0 a.m.13 views

Zyxel EX3301-T0 操作系统命令注入漏洞

The Zyxel EX3301-T0 is a security routing gateway produced by the Chinese company Zyxel. Versions of the Zyxel EX3301-T0 prior to 5.50ABVY.7C0 contained a vulnerability related to operating system command injection. This vulnerability stemmed from the log file download function, where command...

8.8CVSS7.5AI score0.01398EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/02/24 12:0 a.m.24 views

PT-2026-21622

A null pointer dereference vulnerability in the account settings CGI program of the Zyxel VMG3625-T50B firmware versions through 5.50ABPM.9.6C0 and the Zyxel WX3100-T0 firmware versions through 5.50ABVL.4.8C0 could allow an authenticated attacker with administrator privileges to trigger a...

4.9CVSS5.5AI score0.01124EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/11/19 2:6 a.m.11 views

CVE-2025-6599

An uncontrolled resource consumption vulnerability in the web server of Zyxel DX3301-T0 firmware version 5.50ABVY.6.3C0 and earlier could allow an attacker to perform Slowloris‑style denial‑of‑service DoS attacks. Such attacks may temporarily block legitimate HTTP requests and partially disrupt...

7.5CVSS6.8AI score0.00305EPSS
Exploits0References1
OSV
OSV
added 2025/11/18 2:15 a.m.7 views

CVE-2025-8693

A post-authentication command injection vulnerability in the "priv" parameter of Zyxel DX3300-T0 firmware version 5.50ABVY.6.3C0 and earlier could allow an authenticated attacker to execute operating system OS commands on an affected device...

8.8CVSS5.9AI score0.01088EPSS
Exploits0References1
OSV
OSV
added 2025/11/18 2:15 a.m.8 views

CVE-2025-6599

An uncontrolled resource consumption vulnerability in the web server of Zyxel DX3301-T0 firmware version 5.50ABVY.6.3C0 and earlier could allow an attacker to perform Slowloris‑style denial‑of‑service DoS attacks. Such attacks may temporarily block legitimate HTTP requests and partially disrupt...

7.5CVSS5.8AI score0.00305EPSS
Exploits0References1
NVD
NVD
added 2025/11/18 2:15 a.m.6 views

CVE-2025-8693

A post-authentication command injection vulnerability in the "priv" parameter of Zyxel DX3300-T0 firmware version 5.50ABVY.6.3C0 and earlier could allow an authenticated attacker to execute operating system OS commands on an affected device...

8.8CVSS0.01088EPSS
Exploits0References1
CVE
CVE
added 2025/11/18 1:25 a.m.19 views

CVE-2025-8693

Zyxel DX3300-T0 firmware versions prior to 5.50(ABVY.6.3)C0 are affected by a post-authentication command-injection vulnerability in the priv parameter that could allow an authenticated attacker to execute OS commands. The PT-2025-47237 entry confirms the affected firmware range and the impact. R...

8.8CVSS7.3AI score0.01088EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2025/11/18 1:25 a.m.4 views

CVE-2025-8693

A post-authentication command injection vulnerability in the "priv" parameter of Zyxel DX3300-T0 firmware version 5.50ABVY.6.3C0 and earlier could allow an authenticated attacker to execute operating system OS commands on an affected device...

8.8CVSS7.3AI score0.01088EPSS
Exploits0References1
EUVD
EUVD
added 2025/11/18 1:25 a.m.4 views

EUVD-2025-197902

A post-authentication command injection vulnerability in the "priv" parameter of Zyxel DX3300-T0 firmware version 5.50ABVY.6.3C0 and earlier could allow an authenticated attacker to execute operating system OS commands on an affected device...

8.8CVSS7.2AI score0.01088EPSS
Exploits0References2
EUVD
EUVD
added 2025/11/18 1:19 a.m.6 views

EUVD-2025-197903

An uncontrolled resource consumption vulnerability in the web server of Zyxel DX3301-T0 firmware version 5.50ABVY.6.3C0 and earlier could allow an attacker to perform Slowloris‑style denial‑of‑service DoS attacks. Such attacks may temporarily block legitimate HTTP requests and partially disrupt...

5.3CVSS6.3AI score0.00305EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/11/18 1:19 a.m.3 views

CVE-2025-6599

An uncontrolled resource consumption vulnerability in the web server of Zyxel DX3301-T0 firmware version 5.50ABVY.6.3C0 and earlier could allow an attacker to perform Slowloris‑style denial‑of‑service DoS attacks. Such attacks may temporarily block legitimate HTTP requests and partially disrupt...

5.3CVSS6.4AI score0.00305EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/11/18 1:19 a.m.17 views

CVE-2025-6599

An uncontrolled resource consumption vulnerability in the web server of Zyxel DX3301-T0 firmware version 5.50ABVY.6.3C0 and earlier could allow an attacker to perform Slowloris‑style denial‑of‑service DoS attacks. Such attacks may temporarily block legitimate HTTP requests and partially disrupt...

5.3CVSS0.00305EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/11/18 12:0 a.m.5 views

PT-2025-47236

Name of the Vulnerable Software and Affected Versions Zyxel DX3301-T0 versions 5.50ABVY.6.3C0 and earlier Description An uncontrolled resource consumption issue in the web server component of the software could allow an attacker to perform Slowloris-style denial-of-service DoS attacks. These...

7.5CVSS6.6AI score0.00305EPSS
Exploits0References5
CNNVD
CNNVD
added 2025/11/18 12:0 a.m.4 views

Zyxel DX3300-T0 操作系统命令注入漏洞

The Zyxel DX3300-T0 is a small wireless WiFi router from China Hopkins Zyxel. An operating system command injection vulnerability exists in Zyxel DX3300-T0 5.50 ABVY.6.3 C0 and earlier versions, which stems from the presence of post-authentication command injection in the priv parameter, which...

8.8CVSS7.5AI score0.01088EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/11/18 12:0 a.m.9 views

Zyxel DX3301-T0 资源管理错误漏洞

The Zyxel DX3301-T0 is a small wireless WiFi router from China Hopkins Zyxel. A resource management error vulnerability exists in Zyxel DX3301-T0 5.50 ABVY.6.3 C0 and earlier versions, which stems from uncontrolled web server resource consumption and can lead to Slowloris-style denial of service...

7.5CVSS6.6AI score0.00305EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/11/18 12:0 a.m.5 views

PT-2025-47237

Name of the Vulnerable Software and Affected Versions Zyxel DX3300-T0 firmware versions prior to 5.50ABVY.6.3C0 Description A post-authentication command injection issue exists in the priv parameter. Successful exploitation allows an authenticated attacker to execute operating system OS commands ...

8.8CVSS7.5AI score0.01088EPSS
Exploits0References11
Rows per page
Query Builder