İçeriğe geç
Bilgi ve Teknoloji Uygulamada aç

Yüksek CVSS 8.8

CVE-2025-8693: Dm4200-b0 Firmware: işletim sistemi komut enjeksiyonu

Yayın: · Güncelleme:

Açıklama (NVD)

A post-authentication command injection vulnerability in the "priv" parameter of Zyxel DX3300-T0 firmware version 5.50(ABVY.6.3)C0 and earlier could allow an authenticated attacker to execute operating system (OS) commands on an affected device.

Özet bilgiler

Ürün
Zyxel Dm4200-b0 Firmware
CVSS v3.1
8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
%1,05 (yüzdelik 64)
CWE
CWE-78
Yama
Yok / bilinmiyor

Etkilenen sürümler

ÜrünBaşlangıçBitişDüzeltildi
zyxel-dm4200-b0-firmware—5.17\(acbs.1.3\)c0—
zyxel-dx3300-t0-firmware—5.50\(abvy.6.3\)c0—
zyxel-dx3300-t1-firmware—5.50\(abvy.6.3\)c0—
zyxel-dx3301-t0-firmware—5.50\(abvy.6.3\)c0—
zyxel-dx4510-b1-firmware—5.17\(abyl.9\)c0—
zyxel-dx5401-b0-firmware—5.17\(abyo.7\)b2—
zyxel-dx5401-b1-firmware—5.17\(abyo.7\)b2—
zyxel-ee3301-00-firmware—5.63\(acmu.1.1\)c0—
zyxel-ee5301-00-firmware—5.63\(acld.1.1\)c0—
zyxel-ee6510-10-firmware—5.19\(acjq.3\)c0—
zyxel-ex3300-t0-firmware—5.50\(abvy.6.3\)c0—
zyxel-ex3300-t0-firmware—5.50\(acdi.2.1\)c0—
zyxel-ex3300-t1-firmware—5.50\(abvy.6.3\)c0—
zyxel-ex3301-t0-firmware—5.50\(abvy.6.3\)c0—
zyxel-ex3500-t0-firmware—5.44\(achr.4\)c0—
zyxel-ex3501-t0-firmware—5.44\(achr.4\)c0—
zyxel-ex3510-b0-firmware—5.17\(abup.15\)c0—
zyxel-ex3510-b1-firmware—5.17\(abup.15\)c0—
zyxel-ex3600-t0-firmware—5.70\(acif.1.2\)c0—
zyxel-ex5401-b0-firmware—5.17\(abyo.7\)b2—
zyxel-ex5401-b1-firmware—5.17\(abyo.7\)b2—
zyxel-ex5501-b0-firmware—5.17\(abry.5.5\)c0—
zyxel-ex5510-b0-firmware—5.17\(abqx.10\)c0—
zyxel-ex5512-t0-firmware—5.70\(aceg.5\)c0—
zyxel-ex5601-t0-firmware—5.70\(acdz.4.1\)c0—
zyxel-ex5601-t1-firmware—5.70\(acdz.4.1\)c0—
zyxel-ex7501-b0-firmware—5.18\(achn.2.1\)c0—
zyxel-ex7710-b0-firmware—5.18\(acak.1.4\)c0—
zyxel-emg3525-t50b-firmware—5.50\(abpm.9.5\)c0—
zyxel-emg5523-t50b-firmware—5.50\(abpm.9.5\)c0—

Kaynaklar

Uygulamada aç Tüm CVE kayıtları