PT-2026-21644 · Zyxel · Zyxel Dx3301-T0

Published 2026-02-24 · Updated 2026-03-01 · CVE-2025-13943

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Zyxel EX3301-T0 firmware versions through 5.50(ABVY.7)C0

Description A post-authentication command injection issue exists in the log file download function. This could allow an authenticated attacker to execute operating system (OS) commands on an affected device.

Recommendations Versions prior to 5.50(ABVY.7)C0 should be updated.

Fix

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

BDU:2026-03188

CVE-2025-13943

Affected Products

Zyxel Dx3301-T0

References · 20

• https://zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-null-pointer-dereference-and-command-injection-vulnerabilities-in-certain-4g-lte-5g-nr-cpe-dsl-ethernet-cpe-fiber-onts-security-routers-and-wireless-extenders-02-24-2026 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-13943 · Security Note
• https://bdu.fstec.ru/vul/2026-03188 · Security Note
• https://osv.dev/vulnerability/CVE-2025-13943 · Vendor Advisory
• https://twitter.com/cybernewslive/status/2026830608769458652 · Twitter Post
• https://twitter.com/CveFindCom/status/2026140364235489440 · Twitter Post
• https://reddit.com/r/CVEWatch/comments/1rea8zx/top_10_trending_cves_25022026 · Reddit Post
• https://twitter.com/eclypsium/status/2027459507912155563 · Twitter Post
• https://reddit.com/r/TechNadu/comments/1rffi6z/zyxel_critical_rce_alert_how_are_you_protecting · Reddit Post
• https://twitter.com/vuldb/status/2026184368226746592 · Twitter Post
• https://twitter.com/cracbot/status/2028062770038817187 · Twitter Post
• https://twitter.com/hacefresko/status/2026215137187684512 · Twitter Post
• https://reddit.com/r/pwnhub/comments/1rfcoxa/zyxel_addresses_critical_vulnerability_in_device · Reddit Post
• https://reddit.com/r/CVEWatch/comments/1rf78b8/top_10_trending_cves_26022026 · Reddit Post
• https://t.me/CVEtracker/45559 · Telegram Post