CVE Intelligence

Vulnerabilidades do Zyxel Nebula Lte3301-plus Firmware

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Zyxel Nebula Lte3301-plus Firmware: 5 registro(s), com versões afetadas e correções.
cpe:2.3:o:zyxel:nebula_lte3301-plus_firmware

CVE-2026-1460 Alta · 7.2 CWE-78 28/04/2026
OS Command Injection em Zyxel Nebula Fwa70 Firmware
A post-authentication command injection vulnerability in the “DomainName” parameter of the DHCP configuration file in Zyxel DX3301-T0 and EX3301-T0 firmware versions through 5.50(ABVY.7.1)C0 could allow an authenticated attacker with administrator privileges to execute OS commands on an affected device.
CVE-2025-13942 Crítica · 9.8 CWE-78 24/02/2026
OS Command Injection em Zyxel Wx5610-b0 Firmware
A command injection vulnerability in the UPnP function of the Zyxel EX3510-B0 firmware versions through 5.17(ABUP.15.1)C0 could allow a remote attacker to execute operating system (OS) commands on an affected device by sending specially crafted UPnP SOAP requests.
CVE-2025-11847 Média · 4.9 CWE-476 24/02/2026
NULL Pointer Dereference em Zyxel Ex3510-b1 Firmware
A null pointer dereference vulnerability in the IP settings CGI program of the Zyxel VMG3625-T50B firmware versions through 5.50(ABPM.9.6)C0 and the Zyxel WX3100-T0 firmware versions through 5.50(ABVL.4.8)C0 could allow an authenticated attacker with administrator privileges to trigger a denial-of-service (DoS) condition by sending a crafted HTTP request.
CVE-2025-11846 Média · 4.9 CWE-476 23/02/2026
NULL Pointer Dereference em Zyxel Lte3301-plus Firmware
A null pointer dereference vulnerability in the account settings CGI program of the Zyxel VMG3625-T50B firmware versions through 5.50(ABPM.9.6)C0 and the Zyxel WX3100-T0 firmware versions through 5.50(ABVL.4.8)C0 could allow an authenticated attacker with administrator privileges to trigger a denial-of-service (DoS) condition by sending a crafted HTTP request.
CVE-2025-11845 Média · 4.9 CWE-476 23/02/2026
NULL Pointer Dereference em Zyxel Lte3301-plus Firmware
A null pointer dereference vulnerability in the certificate downloader CGI program of the Zyxel VMG3625-T50B firmware versions through 5.50(ABPM.9.6)C0 and the Zyxel WX3100-T0 firmware versions through 5.50(ABVL.4.8)C0 could allow an authenticated attacker with administrator privileges to trigger a denial-of-service (DoS) condition by sending a crafted HTTP request.