CVE-2025-8693 Details
Description
A post-authentication command injection vulnerability in the "priv" parameter of Zyxel DX3300-T0 firmware version 5.50(ABVY.6.3)C0 and earlier could allow an authenticated attacker to execute operating system (OS) commands on an affected device.
A post-authentication command injection vulnerability has been identified in the "priv" parameter of the Zyxel DX3300-T0 firmware version 5.50(ABVY.6.3)C0 and earlier. This vulnerability allows authenticated attackers to execute operating system commands on the affected device. The issue arises in certain DSL/Ethernet CPE, Fiber ONTs, and Wireless Extenders.
Users can upgrade to Zyxel firmware version 5.50(ABVY.6.4)C0 to address this vulnerability. For devices acquired through an ISP, it is recommended to contact the ISP's support team. For other users, please reach out to the local Zyxel support team or visit Zyxel's Community for assistance.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Nov 19, 2025References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-78 | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| zyxel dm4200-b0 firmware | <= 5.17\(acbs.1.3\)c0 |
CPE
Remediation
| |
| zyxel dm4200-b0 | All versions |
CPE
Remediation
| |
| zyxel dx3300-t0 firmware | <= 5.50\(abvy.6.3\)c0 |
CPE
Remediation
| |
| zyxel dx3300-t0 | All versions |
CPE
Remediation
| |
| zyxel dx3300-t1 firmware | <= 5.50\(abvy.6.3\)c0 |
CPE
Remediation
| |
| zyxel dx3300-t1 | All versions |
CPE
Remediation
| |
| zyxel dx3301-t0 firmware | <= 5.50\(abvy.6.3\)c0 |
CPE
Remediation
| |
| zyxel dx3301-t0 | All versions |
CPE
Remediation
| |
| zyxel dx4510-b1 firmware | <= 5.17\(abyl.9\)c0 |
CPE
Remediation
| |
| zyxel dx4510-b1 | All versions |
CPE
Remediation
| |
| zyxel dx5401-b0 firmware | <= 5.17\(abyo.7\)b2 |
CPE
Remediation
| |
| zyxel dx5401-b0 | All versions |
CPE
Remediation
| |
| zyxel dx5401-b1 firmware | <= 5.17\(abyo.7\)b2 |
CPE
Remediation
| |
| zyxel dx5401-b1 | All versions |
CPE
Remediation
| |
| zyxel ee3301-00 firmware | <= 5.63\(acmu.1.1\)c0 |
CPE
Remediation
| |
| zyxel ee3301-00 | All versions |
CPE
Remediation
| |
| zyxel ee5301-00 firmware | <= 5.63\(acld.1.1\)c0 |
CPE
Remediation
| |
| zyxel ee5301-00 | All versions |
CPE
Remediation
| |
| zyxel ee6510-10 firmware | <= 5.19\(acjq.3\)c0 |
CPE
Remediation
| |
| zyxel ee6510-10 | All versions |
CPE
Remediation
| |
| zyxel ex3300-t0 firmware | <= 5.50\(abvy.6.3\)c0 <= 5.50\(acdi.2.1\)c0 |
CPE
Remediation
| |
| zyxel ex3300-t0 | All versions |
CPE
Remediation
| |
| zyxel ex3300-t1 firmware | <= 5.50\(abvy.6.3\)c0 |
CPE
Remediation
| |
| zyxel ex3300-t1 | All versions |
CPE
Remediation
| |
| zyxel ex3301-t0 firmware | <= 5.50\(abvy.6.3\)c0 |
CPE
Remediation
| |
| zyxel ex3301-t0 | All versions |
CPE
Remediation
| |
| zyxel ex3500-t0 firmware | <= 5.44\(achr.4\)c0 |
CPE
Remediation
| |
| zyxel ex3500-t0 | All versions |
CPE
Remediation
| |
| zyxel ex3501-t0 firmware | <= 5.44\(achr.4\)c0 |
CPE
Remediation
| |
| zyxel ex3501-t0 | All versions |
CPE
Remediation
| |
| zyxel ex3510-b0 firmware | <= 5.17\(abup.15\)c0 |
CPE
Remediation
| |
| zyxel ex3510-b0 | All versions |
CPE
Remediation
| |
| zyxel ex3510-b1 firmware | <= 5.17\(abup.15\)c0 |
CPE
Remediation
| |
| zyxel ex3510-b1 | All versions |
CPE
Remediation
| |
| zyxel ex3600-t0 firmware | <= 5.70\(acif.1.2\)c0 |
CPE
Remediation
| |
| zyxel ex3600-t0 | All versions |
CPE
Remediation
| |
| zyxel ex5401-b0 firmware | <= 5.17\(abyo.7\)b2 |
CPE
Remediation
| |
| zyxel ex5401-b0 | All versions |
CPE
Remediation
| |
| zyxel ex5401-b1 firmware | <= 5.17\(abyo.7\)b2 |
CPE
Remediation
| |
| zyxel ex5401-b1 | All versions |
CPE
Remediation
| |
| zyxel ex5501-b0 firmware | <= 5.17\(abry.5.5\)c0 |
CPE
Remediation
| |
| zyxel ex5501-b0 | All versions |
CPE
Remediation
| |
| zyxel ex5510-b0 firmware | <= 5.17\(abqx.10\)c0 |
CPE
Remediation
| |
| zyxel ex5510-b0 | All versions |
CPE
Remediation
| |
| zyxel ex5512-t0 firmware | <= 5.70\(aceg.5\)c0 |
CPE
Remediation
| |
| zyxel ex5512-t0 | All versions |
CPE
Remediation
| |
| zyxel ex5601-t0 firmware | <= 5.70\(acdz.4.1\)c0 |
CPE
Remediation
| |
| zyxel ex5601-t0 | All versions |
CPE
Remediation
| |
| zyxel ex5601-t1 firmware | <= 5.70\(acdz.4.1\)c0 |
CPE
Remediation
| |
| zyxel ex5601-t1 | All versions |
CPE
Remediation
| |
| zyxel ex7501-b0 firmware | <= 5.18\(achn.2.1\)c0 |
CPE
Remediation
| |
| zyxel ex7501-b0 | All versions |
CPE
Remediation
| |
| zyxel ex7710-b0 firmware | <= 5.18\(acak.1.4\)c0 |
CPE
Remediation
| |
| zyxel ex7710-b0 | All versions |
CPE
Remediation
| |
| zyxel emg3525-t50b firmware | <= 5.50\(abpm.9.5\)c0 |
CPE
Remediation
| |
| zyxel emg3525-t50b | All versions |
CPE
Remediation
| |
| zyxel emg5523-t50b firmware | <= 5.50\(abpm.9.5\)c0 |
CPE
Remediation
| |
| zyxel emg5523-t50b | All versions |
CPE
Remediation
| |
| zyxel emg5723-t50k firmware | <= 5.50\(abom.8.6\)c0 |
CPE
Remediation
| |
| zyxel emg5723-t50k | All versions |
CPE
Remediation
| |
| zyxel gm4100-b0 firmware | <= 5.18\(accl.1\)c0 |
CPE
Remediation
| |
| zyxel gm4100-b0 | All versions |
CPE
Remediation
| |
| zyxel vmg3625-t50b firmware | <= 5.50\(abpm.9.5\)c0 |
CPE
Remediation
| |
| zyxel vmg3625-t50b | All versions |
CPE
Remediation
| |
| zyxel vmg3927-t50k firmware | <= 5.50\(abom.8.6\)c0 |
CPE
Remediation
| |
| zyxel vmg3927-t50k | All versions |
CPE
Remediation
| |
| zyxel vmg4005-b50a firmware | <= 5.17\(abqa.3\)c0 |
CPE
Remediation
| |
| zyxel vmg4005-b50a | All versions |
CPE
Remediation
| |
| zyxel vmg4005-b60a firmware | <= 5.17\(abqa.3\)c0 |
CPE
Remediation
| |
| zyxel vmg4005-b60a | All versions |
CPE
Remediation
| |
| zyxel vmg4005-b50b firmware | <= 5.13\(abrl.5.3\)c0 |
CPE
Remediation
| |
| zyxel vmg4005-b50b | All versions |
CPE
Remediation
| |
| zyxel vmg8623-t50b firmware | <= 5.50\(abpm.9.5\)c0 |
CPE
Remediation
| |
| zyxel vmg8623-t50b | All versions |
CPE
Remediation
| |
| zyxel vmg8825-t50k firmware | <= 5.50\(abom.8.6\)c0 |
CPE
Remediation
| |
| zyxel vmg8825-t50k | All versions |
CPE
Remediation
| |
| zyxel ax7501-b0 firmware | <= 5.17\(abpc.6.1\)c0 |
CPE
Remediation
| |
| zyxel ax7501-b0 | All versions |
CPE
Remediation
| |
| zyxel ax7501-b1 firmware | <= 5.17\(abpc.6.1\)c0 |
CPE
Remediation
| |
| zyxel ax7501-b1 | All versions |
CPE
Remediation
| |
| zyxel pe3301-00 firmware | <= 5.63\(acmt.1.1\)c0 |
CPE
Remediation
| |
| zyxel pe3301-00 | All versions |
CPE
Remediation
| |
| zyxel pe5301-01 firmware | <= 5.63\(acoj.1.1\)c0 |
CPE
Remediation
| |
| zyxel pe5301-01 | All versions |
CPE
Remediation
| |
| zyxel pm3100-t0 firmware | <= 5.42\(acbf.3\)c0 |
CPE
Remediation
| |
| zyxel pm3100-t0 | All versions |
CPE
Remediation
| |
| zyxel pm5100-t0 firmware | <= 5.42\(acbf.3\)c0 |
CPE
Remediation
| |
| zyxel pm5100-t0 | All versions |
CPE
Remediation
| |
| zyxel pm7500-00 firmware | <= 5.61\(ackk.1\)c0 |
CPE
Remediation
| |
| zyxel pm7500-00 | All versions |
CPE
Remediation
| |
| zyxel pm7300-t0 firmware | <= 5.42\(abyy.3\)c0 |
CPE
Remediation
| |
| zyxel pm7300-t0 | All versions |
CPE
Remediation
| |
| zyxel px3321-t1 firmware | <= 5.44\(acjb.1.3\)c0 <= 5.44\(achk.1\)c0 |
CPE
Remediation
| |
| zyxel px3321-t1 | All versions |
CPE
Remediation
| |
| zyxel px5301-t0 firmware | <= 5.44\(ackb.0.4\)c0 |
CPE
Remediation
| |
| zyxel px5301-t0 | All versions |
CPE
Remediation
| |
| zyxel we3300-00 firmware | <= 5.70\(acka.0\)c0 |
CPE
Remediation
| |
| zyxel we3300-00 | All versions |
CPE
Remediation
| |
| zyxel wx3100-t0 firmware | <= 5.50\(abvl.4.7\)c0 |
CPE
Remediation
| |
| zyxel wx3100-t0 | All versions |
CPE
Remediation
| |
| zyxel wx3401-b0 firmware | <= 5.17\(abve.2.8\)c0 |
CPE
Remediation
| |
| zyxel wx3401-b0 | All versions |
CPE
Remediation
| |
| zyxel wx3401-b1 firmware | <= 5.17\(abve.2.8\)c0 |
CPE
Remediation
| |
| zyxel wx3401-b1 | All versions |
CPE
Remediation
| |
| zyxel wx5600-t0 firmware | <= 5.70\(aceb.4.1\)c0 |
CPE
Remediation
| |
| zyxel wx5600-t0 | All versions |
CPE
Remediation
| |
| zyxel wx5610-b0 firmware | <= 5.18\(acgj.0.3\)c0 |
CPE
Remediation
| |
| zyxel wx5610-b0 | All versions |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Dec 15, 2025 | Initial Analysis | [email protected] |
| Nov 18, 2025 | New CVE Received | [email protected] |