Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
CVE-2025-6265 Details
Description
A path traversal vulnerability in the file_upload-cgi CGI program of Zyxel NWA50AX PRO firmware version 7.10(ACGE.2) and earlier could allow an authenticated attacker with administrator privileges to access specific directories and delete files, such as the configuration file, on the affected device.
A path traversal vulnerability has been identified in the file_upload-cgi CGI program of Zyxel NWA50AX PRO firmware versions through 7.10(ACGE.2). This vulnerability could enable an authenticated attacker with administrator privileges to access certain directories and delete files, including the device's configuration file.
Users can upgrade to Zyxel NWA50AX PRO firmware version 7.10(ACGE.3) to address this vulnerability.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Jul 19, 2025Exploitation: NoneAutomatable: NoTechnical Impact: Total
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-path-traversal-vulnerability-in-aps-07-15-2025 | [email protected] | Vendor Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-22 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| zyxel nwa50ax firmware | <= 7.10\(abyw.1\) |
CPE
Remediation
| |
| zyxel nwa50ax | All versions |
CPE
Remediation
| |
| zyxel nwa50ax pro firmware | <= 7.10\(acge.2\) |
CPE
Remediation
| |
| zyxel nwa50ax pro | All versions |
CPE
Remediation
| |
| zyxel nwa55axe firmware | <= 7.10\(abzl.1\) |
CPE
Remediation
| |
| zyxel nwa55axe | All versions |
CPE
Remediation
| |
| zyxel nwa90ax firmware | <= 7.10\(accv.1\) |
CPE
Remediation
| |
| zyxel nwa90ax | All versions |
CPE
Remediation
| |
| zyxel nwa90ax pro firmware | <= 7.10\(acgf.2\) |
CPE
Remediation
| |
| zyxel nwa90ax pro | All versions |
CPE
Remediation
| |
| zyxel nwa110ax firmware | <= 7.10\(abtg.1\) |
CPE
Remediation
| |
| zyxel nwa110ax | All versions |
CPE
Remediation
| |
| zyxel nwa130be firmware | <= 7.10\(acil.2\) |
CPE
Remediation
| |
| zyxel nwa130be | All versions |
CPE
Remediation
| |
| zyxel nwa210ax firmware | <= 7.10\(abtd.1\) |
CPE
Remediation
| |
| zyxel nwa210ax | All versions |
CPE
Remediation
| |
| zyxel nwa220ax-6e firmware | <= 7.10\(acco.1\) |
CPE
Remediation
| |
| zyxel nwa220ax-6e | All versions |
CPE
Remediation
| |
| zyxel nwa1123ac pro firmware | <= 6.28\(abhd.3\) |
CPE
Remediation
| |
| zyxel nwa1123ac pro | All versions |
CPE
Remediation
| |
| zyxel wac500h firmware | <= 6.70\(abwa.6\) |
CPE
Remediation
| |
| zyxel wac500h | All versions |
CPE
Remediation
| |
| zyxel wac5302d-sv2 firmware | <= 6.25\(abvz.9\) |
CPE
Remediation
| |
| zyxel wac5302d-sv2 | All versions |
CPE
Remediation
| |
| zyxel wac6103d-i firmware | <= 6.28\(aaxh.3\) |
CPE
Remediation
| |
| zyxel wac6103d-i | All versions |
CPE
Remediation
| |
| zyxel wax300h firmware | <= 7.10\(achf.1\) |
CPE
Remediation
| |
| zyxel wax300h | All versions |
CPE
Remediation
| |
| zyxel wax510d firmware | <= 7.10\(abtf.1\) |
CPE
Remediation
| |
| zyxel wax510d | All versions |
CPE
Remediation
| |
| zyxel wax610d firmware | <= 7.10\(abte.1\) |
CPE
Remediation
| |
| zyxel wax610d | All versions |
CPE
Remediation
| |
| zyxel wax620d-6e firmware | <= 7.10\(accn.1\) |
CPE
Remediation
| |
| zyxel wax620d-6e | All versions |
CPE
Remediation
| |
| zyxel wax630s firmware | <= 7.10\(abzd.1\) |
CPE
Remediation
| |
| zyxel wax630s | All versions |
CPE
Remediation
| |
| zyxel wax640s-6e firmware | <= 7.10\(accm.1\) |
CPE
Remediation
| |
| zyxel wax640s-6e | All versions |
CPE
Remediation
| |
| zyxel wax650s firmware | <= 7.10\(abrm.1\) |
CPE
Remediation
| |
| zyxel wax650s | All versions |
CPE
Remediation
| |
| zyxel wax655e firmware | <= 7.10\(acdo.1\) |
CPE
Remediation
| |
| zyxel wax655e | All versions |
CPE
Remediation
| |
| zyxel wbe530 firmware | <= 7.10\(acle.2\) |
CPE
Remediation
| |
| zyxel wbe530 | All versions |
CPE
Remediation
| |
| zyxel wbe660s firmware | <= 7.10\(acgg.2\) |
CPE
Remediation
| |
| zyxel wbe660s | All versions |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Jan 14, 2026 | Initial Analysis | [email protected] |
| Jul 15, 2025 | New CVE Received | [email protected] |