← Database
CVE-2025-13942
CRITICAL
CVSS: 9.8
Published: 2026-02-24
Modified: 2026-06-17
Description
A command injection vulnerability in the UPnP function of the Zyxel EX3510-B0 firmware versions through 5.17(ABUP.15.1)C0 could allow a remote attacker to execute operating system (OS) commands on an affected device by sending specially crafted UPnP SOAP requests.
Affected Platforms
Zyxel Ex5512-T0Zyxel Ex3510-B1 FirmwareZyxel Vmg4927-B50AZyxel Ex3510-B1Zyxel Ex2210-T0 FirmwareZyxel Lte3301-PlusZyxel Ex5510-B0 FirmwareZyxel Nr7101 FirmwareZyxel Ex2210-T0Zyxel Px3321-T1