CVE Intelligence

Zyxel Nebula Lte3301-plus Firmware vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Zyxel Nebula Lte3301-plus Firmware: 5 record(s), with affected versions and fixes.
cpe:2.3:o:zyxel:nebula_lte3301-plus_firmware

CVE-2026-1460 High · 7.2 CWE-78 Apr 28, 2026
OS Command Injection in Zyxel Nebula Fwa70 Firmware
A post-authentication command injection vulnerability in the “DomainName” parameter of the DHCP configuration file in Zyxel DX3301-T0 and EX3301-T0 firmware versions through 5.50(ABVY.7.1)C0 could allow an authenticated attacker with administrator privileges to execute OS commands on an affected device.
CVE-2025-13942 Critical · 9.8 CWE-78 Feb 24, 2026
OS Command Injection in Zyxel Wx5610-b0 Firmware
A command injection vulnerability in the UPnP function of the Zyxel EX3510-B0 firmware versions through 5.17(ABUP.15.1)C0 could allow a remote attacker to execute operating system (OS) commands on an affected device by sending specially crafted UPnP SOAP requests.
CVE-2025-11847 Medium · 4.9 CWE-476 Feb 24, 2026
NULL Pointer Dereference in Zyxel Ex3510-b1 Firmware
A null pointer dereference vulnerability in the IP settings CGI program of the Zyxel VMG3625-T50B firmware versions through 5.50(ABPM.9.6)C0 and the Zyxel WX3100-T0 firmware versions through 5.50(ABVL.4.8)C0 could allow an authenticated attacker with administrator privileges to trigger a denial-of-service (DoS) condition by sending a crafted HTTP request.
CVE-2025-11846 Medium · 4.9 CWE-476 Feb 23, 2026
NULL Pointer Dereference in Zyxel Lte3301-plus Firmware
A null pointer dereference vulnerability in the account settings CGI program of the Zyxel VMG3625-T50B firmware versions through 5.50(ABPM.9.6)C0 and the Zyxel WX3100-T0 firmware versions through 5.50(ABVL.4.8)C0 could allow an authenticated attacker with administrator privileges to trigger a denial-of-service (DoS) condition by sending a crafted HTTP request.
CVE-2025-11845 Medium · 4.9 CWE-476 Feb 23, 2026
NULL Pointer Dereference in Zyxel Lte3301-plus Firmware
A null pointer dereference vulnerability in the certificate downloader CGI program of the Zyxel VMG3625-T50B firmware versions through 5.50(ABPM.9.6)C0 and the Zyxel WX3100-T0 firmware versions through 5.50(ABVL.4.8)C0 could allow an authenticated attacker with administrator privileges to trigger a denial-of-service (DoS) condition by sending a crafted HTTP request.