← Database
CVE-2025-13943
HIGH
CVSS: 8.8
Published: 2026-02-24
Modified: 2026-06-17
Description
A post-authentication command injection vulnerability in the log file download function of the Zyxel EX3301-T0 firmware versions through 5.50(ABVY.7)C0 could allow an authenticated attacker to execute operating system (OS) commands on an affected device.
Affected Platforms
Zyxel Ex3301-T0 FirmwareZyxel Pm7300-T0 FirmwareZyxel Pm3100-T0 FirmwareZyxel Gm4100-B0 FirmwareZyxel Ee6510-10Zyxel Ex3510-B0 FirmwareZyxel Dx4510-B0 FirmwareZyxel Ex7501-B0 FirmwareZyxel Vmg4005-B50A FirmwareZyxel Ex3501-T0 Firmware