CVE-2025-13943: OS Command Injection
Published Feb 24, 2026
·Updated
A post-authentication command injection vulnerability in the log file download function of the Zyxel EX3301-T0 firmware versions through 5.50(ABVY.7)C0 could allow an authenticated attacker to execute operating system (OS) commands on an affected device.
Affected Software
107 affected components
Zyxel EX3301-T0<=5.50(ABVY.7)C0
All of the following
Zyxel Ee5301-00 Firmware<5.63\(acld.2.1\)c0
Zyxel Ee5301-00
All of the following
Zyxel Ee3301-00 Firmware<5.63\(acmu.2.1\)c0
Zyxel Ee3301-00
All of the following
Zyxel Dx5401-b1 Firmware<5.17\(abyo.7.1\)c0
Zyxel Dx5401-b1
All of the following
Zyxel Dx4510-b1 Firmware<5.17\(abyl.10.1\)c0
Zyxel Dx4510-b1
All of the following
Zyxel Dx4510-b0 Firmware<5.17\(abyl.10.1\)c0
Zyxel Dx4510-b0
All of the following
Zyxel DX3301-T0 firmware<5.50\(abvy.7.1\)c0
Zyxel DX3301-T0
All of the following
Zyxel Dx3300-t1 Firmware<5.50\(abvy.7.1\)c0
Zyxel Dx3300-t1
All of the following
Zyxel DX3300-T0 firmware<5.50\(abvy.7.1\)c0
Zyxel DX3300-T0
All of the following
Zyxel Ee6510-10 Firmware<5.19\(acjq.4.1\)c0
Zyxel Ee6510-10
All of the following
Zyxel Emg3525-t50b Firmware<5.50\(abpm.9.7\)c0
Zyxel Emg3525-t50b
All of the following
Zyxel Emg5523-t50b Firmware<5.50\(abpm.9.7\)c0
Zyxel Emg5523-t50b
All of the following
Zyxel Ex2210-t0 Firmware<5.50\(acdi.2.3\)c0
Zyxel Ex2210-t0
All of the following
Zyxel Ex3300-t0 Firmware<5.50\(abvy.7.1\)c0
Zyxel Ex3300-t0
All of the following
Zyxel Ex3300-t1 Firmware<5.50\(abvy.7.1\)c0
Zyxel Ex3300-t1
All of the following
Zyxel EX3301-T0 firmware<5.50\(abvy.7.1\)c0
Zyxel EX3301-T0
All of the following
Zyxel Ex3500-t0 Firmware<5.44\(achr.5.1\)c0
Zyxel Ex3500-t0
All of the following
Zyxel Ex3501-t0 Firmware<5.44\(achr.5.1\)c0
Zyxel Ex3501-t0
All of the following
Zyxel EX3510-B0 firmware<5.17\(abup.15.2\)c0
Zyxel EX3510-B0
All of the following
Zyxel Ex3510-b1 Firmware<5.17\(abup.15.2\)c0
Zyxel Ex3510-b1
All of the following
Zyxel Ex3600-t0 Firmware<5.70\(acif.2.1\)c0
Zyxel Ex3600-t0
All of the following
Zyxel Ex5401-b1 Firmware<5.17\(abyo.7.1\)c0
Zyxel Ex5401-b1
All of the following
Zyxel Ex5510-b0 Firmware<5.17\(abqx.11.1\)c0
Zyxel Ex5510-b0
All of the following
Zyxel Ex5512-t0 Firmware<5.70\(aceg.5.3\)c0
Zyxel Ex5512-t0
All of the following
Zyxel Ex5601-t0 Firmware<5.70\(acdz.5.1\)c0
Zyxel Ex5601-t0
All of the following
Zyxel EX5601-T1 firmware<5.70\(acdz.5.1\)c0
Zyxel EX5601-T1
All of the following
Zyxel Ex7501-b0 Firmware<5.18\(achn.3.1\)c0
Zyxel Ex7501-b0
All of the following
Zyxel Ex7710-b0 Firmware<5.18\(acak.1.6\)c0
Zyxel Ex7710-b0
All of the following
Zyxel Gm4100-b0 Firmware<5.18\(accl.2\)c0
Zyxel Gm4100-b0
All of the following
Zyxel Pm7500-00 Firmware<5.61\(ackk.1.2\)c0
Zyxel Pm7500-00
All of the following
Zyxel VMG3625-T50B firmware<5.50\(abpm.9.7\)c0
Zyxel VMG3625-T50B
All of the following
Zyxel VMG4005-B50A firmware<5.17\(abqa.3.2\)c0
Zyxel VMG4005-B50A
All of the following
Zyxel Vmg4005-b60a Firmware<5.17\(abqa.3.2\)c0
Zyxel Vmg4005-b60a
All of the following
Zyxel AX7501-B1 firmware<5.17\(abpc.7.1\)c0
Zyxel AX7501-B1
All of the following
Zyxel Pe3301-00 Firmware<5.63\(acmt.2.1\)c0
Zyxel Pe3301-00
All of the following
Zyxel Pe5301-01 Firmware<5.63\(acoj.2.1\)c0
Zyxel Pe5301-01
All of the following
Zyxel Pm3100-t0 Firmware<5.42\(acbf.4.1\)c0
Zyxel Pm3100-t0
All of the following
Zyxel Pm5100-t0 Firmware<5.42\(acbf.4.1\)c0
Zyxel Pm5100-t0
All of the following
Zyxel Pm5100-t1 Firmware<5.42\(acbf.4.1\)c0
Zyxel Pm5100-t1
All of the following
Zyxel Pm7300-t0 Firmware<5.42\(abyy.4.1\)c0
Zyxel Pm7300-t0
All of the following
Zyxel Px3321-t1 Firmware<5.44\(achk.3\)c0
Zyxel Px3321-t1
All of the following
Zyxel Px3321-t1 Firmware<5.44\(acjb.1.5\)c0
Zyxel Px3321-t1
All of the following
Zyxel Px5301-t0 Firmware<5.44\(ackb.0.6\)c0
Zyxel Px5301-t0
All of the following
Zyxel Vmg8623-t50b Firmware<5.50\(abpm.9.7\)c0
Zyxel Vmg8623-t50b
All of the following
Zyxel We3300-00 Firmware<5.70\(acka.1.1\)c0
Zyxel We3300-00
All of the following
Zyxel WX3100-T0 firmware<5.50\(abvl.4.9\)c0
Zyxel WX3100-T0
All of the following
Zyxel Wx3401-b1 Firmware<5.17\(abve.2.10\)c0
Zyxel Wx3401-b1
All of the following
Zyxel Wx5600-t0 Firmware<5.70\(aceb.5.1\)c0
Zyxel Wx5600-t0
All of the following
Zyxel Wx5610-b0 Firmware<5.18\(acgj.0.5\)c0
Zyxel Wx5610-b0
All of the following
Zyxel Dm4200-b0 Firmware<5.17\(acbs.1.6\)c0
Zyxel Dm4200-b0
All of the following
Zyxel We4600-00 Firmware<6.70\(ackt.0\)c0
Zyxel We4600-00
All of the following
Zyxel Emg6726-b10a Firmware<5.13\(abnp.8.2\)c1
Zyxel Emg6726-b10a
All of the following
Zyxel Am7510-00 Firmware<5.63\(acoe.0.1\)c0
Zyxel Am7510-00
All of the following
Zyxel Vmg4927-b50a Firmware<5.13\(ably.10.2\)c0
Zyxel Vmg4927-b50a
Event History
Feb 24, 2026
CVE Published
via MITRE·02:38 AM
Data Sourced
via MITRE·02:38 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·03:16 AM
DescriptionSeverityWeaknessAffected Software
Feb 25, 2026
News Published
via BleepingComputer·12:53 PM
News Published
via BleepingComputer·12:53 PM
Frequently Asked Questions
1
What is the severity of CVE-2025-13943?
CVE-2025-13943 is rated as a high severity vulnerability due to its potential for post-authentication command injection.
2
How do I fix CVE-2025-13943?
To mitigate CVE-2025-13943, users should upgrade the Zyxel EX3301-T0 firmware to a version beyond 5.50(ABVY.7)C0 that addresses this vulnerability.
3
Who is affected by CVE-2025-13943?
CVE-2025-13943 affects devices running Zyxel EX3301-T0 firmware versions up to and including 5.50(ABVY.7)C0.
4
What can an attacker do with CVE-2025-13943?
An authenticated attacker exploiting CVE-2025-13943 can execute arbitrary operating system commands on the affected device.
5
When was CVE-2025-13943 reported?
CVE-2025-13943 was reported as a vulnerability in the Zyxel firmware, highlighting security concerns in specific versions.