Known vulnerabilities in LTE3301-PLUS
Vendor:
ZyXEL Communications Corp.
Software:
LTE3301-PLUS
Software CPE:
cpe:2.3:h:zyxel_communications_corp:lte3301-plus:*:*:*:*:*:*:*:*
Website:
https://www.zyxel.com/
Total vulnerabilities:
7
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
Vulnerabilities (7)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU123166 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2025-13942 |
CWE-78 | High | 1.00(ABQU.9)C0 | 24.02.2026 |
SB2026022438 |
||
| #VU123162 - NULL Pointer Dereference CVE-2025-11847 |
CWE-476 | Low | 1.00(ABQU.9)C0 | 24.02.2026 |
SB2026022440 |
||
| #VU123161 - NULL Pointer Dereference CVE-2025-11846 |
CWE-476 | Low | 1.00(ABQU.9)C0 | 24.02.2026 |
SB2026022440 |
||
| #VU123160 - NULL Pointer Dereference CVE-2025-11845 |
CWE-476 | Low | 1.00(ABQU.9)C0 | 24.02.2026 |
SB2026022440 |
||
| #VU53154 - Improper input validation CVE-2020-24586 |
CWE-20 | Low | - | 12.05.2021 |
SB2021051211 SB2021051708 SB2021051810 and 34 more |
||
| #VU53098 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing) CVE-2020-24588 |
CWE-451 | Low | - | 11.05.2021 |
SB2021051118 SB2021051227 SB2021051708 and 57 more |
||
| #VU53096 - CVE-2020-24587 |
Low | - | 11.05.2021 |
SB2021051118 SB2021051708 SB2021051810 and 32 more |