CVE-2025-8693 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

A post-authentication command injection vulnerability in the "priv" parameter of Zyxel DX3300-T0 firmware version 5.50(ABVY.6.3)C0 and earlier could allow an au…
High CVSS: 8.8

CVE-2025-8693

A post-authentication command injection vulnerability in the "priv" parameter of Zyxel DX3300-T0 firmware version 5.50(ABVY.6.3)C0 and earlier could allow an authenticated attacker to execute operating system (OS) commands on an affected device.
Vendor
Zyxel
Product
Dm4200-b0 Firmware
CWE
CWE-78
Yayın Tarihi
2025-11-18 02:15:45
Güncelleme
2025-12-15 14:03:35
Source Identifier
security@zyxel.com.tw
KEV Date Added
-

Kategoriler

CWE-78 Dm4200-b0 Firmware HIGH Zyxel 2025

Referanslar

https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-uncontrolled-resource-consumption-and-command-injection-vulnerabilities-in-certain-4g-lte-5g-nr-cpe-dsl-ethernet-cpe-fiber-onts-security-routers-and-wireless-extenders-11-18-2025