CVE-2024-12010: OS Command Injection
Published Mar 11, 2025
·Updated
A post-authentication command injection vulnerability in the ”zyUtilMailSend” function of the Zyxel AX7501-B1 firmware version V5.17(ABPC.5.3)C0 and earlier could allow an authenticated attacker with administrator privileges to execute operating system (OS) commands on a vulnerable device.
Affected Software
85 affected components
Zyxel AX7501-B1<=V5.17(ABPC.5.3)C0
All of the following
Zyxel Wx5610-b0 Firmware<=5.18\(acgj.0.1\)c0
Zyxel Wx5610-b0
All of the following
Zyxel DX3300-T0 firmware<=5.50\(abvy.5.4\)c0
Zyxel DX3300-T0
All of the following
Zyxel Dx3300-t1 Firmware<=5.50\(abvy.5.4\)c0
Zyxel Dx3300-t1
All of the following
Zyxel DX3301-T0 firmware<=5.50\(abvy.5.4\)c0
Zyxel DX3301-T0
All of the following
Zyxel Dx4510-b0 Firmware<=5.17\(abyl.8\)c0
Zyxel Dx4510-b0
All of the following
Zyxel Dx4510-b1 Firmware<=5.17\(abyl.8\)c0
Zyxel Dx4510-b1
All of the following
Zyxel DX5401-B0 firmware<=5.17\(abyo.6.4\)c0
Zyxel DX5401-B0
All of the following
Zyxel Dx5401-b1 Firmware<=5.17\(abyo.6.4\)c0
Zyxel Dx5401-b1
All of the following
Zyxel Ee6510-10 Firmware<=5.19\(acjq.1\)c1
Zyxel Ee6510-10
All of the following
Zyxel Ex3300-t0 Firmware<=5.50\(abvy.5.4\)c0
Zyxel Ex3300-t0
All of the following
Zyxel Ex3300-t1 Firmware<=5.50\(abvy.5.4\)c0
Zyxel Ex3300-t1
All of the following
Zyxel EX3301-T0 firmware<=5.50\(abvy.5.4\)c0
Zyxel EX3301-T0
All of the following
Zyxel Ex3500-t0 Firmware<=5.44\(achr.3\)c0
Zyxel Ex3500-t0
All of the following
Zyxel Ex3501-t0 Firmware<=5.44\(achr.3\)c0
Zyxel Ex3501-t0
All of the following
Zyxel EX3510-B0 firmware<=5.17\(abup.13\)c0
Zyxel EX3510-B0
All of the following
Zyxel Ex3510-b1 Firmware<=5.17\(abup.13\)c0
Zyxel Ex3510-b1
All of the following
Zyxel Ex3600-t0 Firmware<=5.70\(acif.0.5\)c0
Zyxel Ex3600-t0
All of the following
Zyxel Ex5401-b0 Firmware<=5.17\(abyo.6.4\)c0
Zyxel Ex5401-b0
All of the following
Zyxel Ex5401-b1 Firmware<=5.17\(abyo.6.4\)c0
Zyxel Ex5401-b1
All of the following
Zyxel Ex5501-b0 Firmware<=5.17\(abry.5.3\)c0
Zyxel Ex5501-b0
All of the following
Zyxel Ex5510-b0 Firmware<=5.17\(abqx.10\)c0
Zyxel Ex5510-b0
All of the following
Zyxel Ex5512-t0 Firmware<=5.70\(aceg4.2\)c0
Zyxel Ex5512-t0
All of the following
Zyxel Ex5601-t0 Firmware<=5.70\(acdz.3.6\)c0
Zyxel Ex5601-t0
All of the following
Zyxel EX5601-T1 firmware<=5.70\(acdz.3.6\)c0
Zyxel EX5601-T1
All of the following
Zyxel Ex7501-b0 Firmware<=5.18\(achn.1.3\)c0
Zyxel Ex7501-b0
All of the following
Zyxel Ex7710-b0 Firmware<=5.18\(acak.1.1\)c1
Zyxel Ex7710-b0
All of the following
Zyxel Emg3525-t50b Firmware<=5.50\(abpm.9.3\)c0
Zyxel Emg3525-t50b
All of the following
Zyxel Emg5523-t50b Firmware<=5.50\(abpm.9.3\)c0
Zyxel Emg5523-t50b
All of the following
Zyxel Emg5723-t50k Firmware<=5.50\(abom.8.5\)c0
Zyxel Emg5723-t50k
All of the following
Zyxel VMG3625-T50B firmware<=5.50\(abpm.9.3\)c0
Zyxel VMG3625-T50B
All of the following
Zyxel Vmg3927-t50k Firmware<=5.50\(abom.8.5\)c0
Zyxel Vmg3927-t50k
All of the following
Zyxel Vmg8623-t50b Firmware<=5.50\(abpm.9.3\)c0
Zyxel Vmg8623-t50b
All of the following
Zyxel VMG8825-T50K firmware<=5.50\(abom.8.5\)c0
Zyxel VMG8825-T50K
All of the following
Zyxel AX7501-B0 firmware<=5.17\(abpc.5.3\)c0
Zyxel AX7501-B0
All of the following
Zyxel AX7501-B1 firmware<=5.17\(abpc.5.3\)c0
Zyxel AX7501-B1
All of the following
Zyxel Px3321-t1 Firmware<=5.44\(acjb.1.1\)c0
Zyxel Px3321-t1
All of the following
Zyxel Px3321-t1 Firmware<=5.44\(achk.0.3\)c0
Zyxel Px3321-t1
All of the following
Zyxel Px5301-t0 Firmware<=5.44\(ackb.0.1\)c0
Zyxel Px5301-t0
All of the following
Zyxel WX3100-T0 firmware<=5.50\(abvl.4.5\)c0
Zyxel WX3100-T0
All of the following
Zyxel Wx3401-b0 Firmware<=5.17\(abve.2.6\)c0
Zyxel Wx3401-b0
All of the following
Zyxel Wx3401-b1 Firmware<=5.17\(abve.2.6\)c0
Zyxel Wx3401-b1
All of the following
Zyxel Wx5600-t0 Firmware<=5.70\(aceb.3.3\)c0
Zyxel Wx5600-t0
Event History
Mar 11, 2025
CVE Published
via MITRE·01:44 AM
Data Sourced
via MITRE·01:44 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·02:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-12010?
CVE-2024-12010 has been rated as a high severity vulnerability due to its potential for allowing authenticated attackers to execute OS commands.
2
How do I fix CVE-2024-12010?
To remediate CVE-2024-12010, it is recommended to upgrade the firmware of the Zyxel AX7501-B1 to a version higher than V5.17(ABPC.5.3)C0.
3
Who is affected by CVE-2024-12010?
CVE-2024-12010 affects devices running Zyxel AX7501-B1 firmware version V5.17(ABPC.5.3)C0 and earlier.
4
What type of vulnerability is CVE-2024-12010?
CVE-2024-12010 is a post-authentication command injection vulnerability.
5
What can an attacker do with CVE-2024-12010?
An attacker exploiting CVE-2024-12010 can execute arbitrary operating system commands on the vulnerable Zyxel devices.