Approved changes feed: RSS · Atom

cpe:2.3:o:zyxel:ex3510-b1_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorZyxel (d3fcf896-5708-55f8-8f74-3e19a9d55b89)
ProductEx3510 B1 Firmware (50528e7c-5fad-55ba-9487-b1bb26d0d139)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-8693 vulnerable 2026-06-08 07:45:20.944427 Details available
HIGH (8.8)
A post-authentication command injection vulnerability in the "priv" parameter of Zyxel DX3300-T0 firmware version 5.50(ABVY.6.3)C0 and earlier could allow an authenticated attacker to execute operating system (OS) commands on an affected device.
Published: 2025-11-18T01:25:05.406Z
Updated: 2026-02-26T16:56:47.780Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-13943 vulnerable 2026-06-08 07:06:33.207439 Details available
HIGH (8.8)
A post-authentication command injection vulnerability in the log file download function of the Zyxel EX3301-T0 firmware versions through 5.50(ABVY.7)C0 could allow an authenticated attacker to execute operating system (OS) commands on an affected device.
Published: 2026-02-24T02:38:05.388Z
Updated: 2026-02-26T14:44:10.178Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-13942 vulnerable 2026-06-08 07:06:33.159116 Details available
CRITICAL (9.8)
A command injection vulnerability in the UPnP function of the Zyxel EX3510-B0 firmware versions through 5.17(ABUP.15.1)C0 could allow a remote attacker to execute operating system (OS) commands on an affected device by sending specially crafted UPnP SOAP requests.
Published: 2026-02-24T02:32:18.934Z
Updated: 2026-02-26T14:44:10.318Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-11848 vulnerable 2026-06-08 07:04:29.211650 Details available
MEDIUM (4.9)
A null pointer dereference vulnerability in the Wake-on-LAN CGI program of the Zyxel VMG3625-T50B firmware version through 5.50(ABPM.9.6)C0 and the Zyxel WX3100-T0 firmware versions through 5.50(ABVL.4.8)C0 could allow an authenticated attacker with administrator privileges to trigger a denial-of-service (DoS) condition by sending a crafted HTTP request.
Published: 2026-02-24T02:14:18.688Z
Updated: 2026-02-24T20:25:28.725Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-11847 vulnerable 2026-06-08 07:04:29.203288 Details available
MEDIUM (4.9)
A null pointer dereference vulnerability in the IP settings CGI program of the Zyxel VMG3625-T50B firmware versions through 5.50(ABPM.9.6)C0 and the Zyxel WX3100-T0 firmware versions through 5.50(ABVL.4.8)C0 could allow an authenticated attacker with administrator privileges to trigger a denial-of-service (DoS) condition by sending a crafted HTTP request.
Published: 2026-02-24T02:09:44.684Z
Updated: 2026-02-24T20:27:08.473Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-11846 vulnerable 2026-06-08 07:04:29.193829 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-11845 vulnerable 2026-06-08 07:04:29.125961 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-9197 vulnerable 2026-06-08 07:00:26.885016 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-8748 vulnerable 2026-06-08 07:00:25.575912 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-38269 vulnerable 2026-06-08 06:41:44.726606 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-38268 vulnerable 2026-06-08 06:41:44.721533 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-38267 vulnerable 2026-06-08 06:41:44.712855 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-38266 vulnerable 2026-06-08 06:41:44.665104 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-12010 vulnerable 2026-06-08 06:23:50.982185 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-12009 vulnerable 2026-06-08 06:23:50.935967 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.