{"id":"CVE-2025-13942","url":"https://www.cyber-defence.io/tools/cve/CVE-2025-13942","generatedAt":"2026-10-28T03:41:56.209Z","title":"A command injection vulnerability in the UPnP function of the Zyxel EX3510-B0 firmware versions through 5.17(ABUP.15.1)C0 could allow a remote attacker to execute operating system (OS) commands on an affected device by sending specially crafted UPnP…","description":"A command injection vulnerability in the UPnP function of the Zyxel EX3510-B0 firmware versions through 5.17(ABUP.15.1)C0 could allow a remote attacker to execute operating system (OS) commands on an affected device by sending specially crafted UPnP SOAP requests.","published":"2026-02-24T03:16:00.000Z","lastModified":"2026-06-17T08:35:01.000Z","status":"Analyzed","sourceIdentifier":"security@zyxel.com.tw","cvss":{"version":"3.1","score":9.8,"severity":"CRITICAL","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},"cwe":["CWE-78"],"affected":["zyxel/wx5610-b0 firmware","zyxel/lte3301-plus firmware","zyxel/nebula lte3301-plus firmware","zyxel/nr7101 firmware","zyxel/nebula nr7101 firmware","zyxel/dx4510-b0 firmware","zyxel/dx4510-b1 firmware","zyxel/ee6510-10 firmware","zyxel/emg6726-b10a firmware","zyxel/ex2210-t0 firmware","zyxel/ex3510-b0 firmware","zyxel/ex3510-b1 firmware","zyxel/ex5510-b0 firmware","zyxel/ex5512-t0 firmware","zyxel/ex7710-b0 firmware","zyxel/vmg4927-b50a firmware","zyxel/px3321-t1 firmware","zyxel/px5301-t0 firmware"],"epss":{"score":0.01179,"percentile":0.67515,"date":"2026-10-27","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"high","text":"High impact if exploited, but EPSS currently rates exploitation as unlikely (1.18%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit."},"changes":[],"references":[{"url":"https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-null-pointer-dereference-and-command-injection-vulnerabilities-in-certain-4g-lte-5g-nr-cpe-dsl-ethernet-cpe-fiber-onts-security-routers-and-wireless-extenders-02-24-2026","tags":["Vendor Advisory"],"source":"security@zyxel.com.tw"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2025-13942","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}