zyUtilMailSend Arbitrary Command Execution

The vulnerability of the zyUtilMailSend function in Wi-Fi amplifiers, subscriber terminals, DSL/Ethernet CPE routers exists due to the lack of measures to neutralize specific elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

CVE-2024-12010

A post-authentication command injection vulnerability in the ”zyUtilMailSend” function of the Zyxel AX7501-B1 firmware version V5.17ABPC.5.3C0 and earlier could allow an authenticated attacker with administrator privileges to execute operating system OS commands on a vulnerable device...

CVE-2024-12010: Improper Neutralization of Special Elements used in an OS Command

A post-authentication command injection vulnerability in the ”zyUtilMailSend” function of the Zyxel AX7501-B1 firmware version V5.17ABPC.5.3C0 and earlier could allow an authenticated attacker with administrator privileges to execute operating system OS commands on a vulnerable device...

Zyxel AX7501-B1: Operating System Command Injection Vulnerability

The Zyxel AX7501-B1 is a router from China Heqin Zyxel. An operating system command injection vulnerability exists in Zyxel AX7501-B1 V5.17ABPC.5.3C0 and earlier versions, which stems from a command injection in the zyUtilMailSend function that could lead to the execution of operating system...

PT-2025-10685

Name of the Vulnerable Software and Affected Versions Zyxel AX7501-B1 firmware versions prior to V5.17ABPC.5.3C0 Description A post-authentication command injection issue in the zyUtilMailSend function could allow an authenticated attacker with administrator privileges to execute operating system...