Known vulnerabilities in PM7300-T0
Vendor:
ZyXEL Communications Corp.
Software:
PM7300-T0
Software CPE:
cpe:2.3:h:zyxel_communications_corp:pm7300-t0:*:*:*:*:*:*:*:*
Website:
https://www.zyxel.com/
Total vulnerabilities:
13
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
8.8
Breakdown by Severity Chart
Vulnerabilities (13)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU139078 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2026-6952 |
CWE-78 | Low | 5.42(ABYY.4.2)C0 | 22.07.2026 |
SB2026072223 |
||
| #VU123168 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2025-13943 |
CWE-78 | Medium | 5.42(ABYY.4.1)C0 | 24.02.2026 |
SB2026022439 |
||
| #VU123163 - NULL Pointer Dereference CVE-2025-11848 |
CWE-476 | Low | 5.42(ABYY.4.1)C0 | 24.02.2026 |
SB2026022440 |
||
| #VU123162 - NULL Pointer Dereference CVE-2025-11847 |
CWE-476 | Low | 5.42(ABYY.4.1)C0 | 24.02.2026 |
SB2026022440 |
||
| #VU123161 - NULL Pointer Dereference CVE-2025-11846 |
CWE-476 | Low | 5.42(ABYY.4.1)C0 | 24.02.2026 |
SB2026022440 |
||
| #VU123160 - NULL Pointer Dereference CVE-2025-11845 |
CWE-476 | Low | 5.42(ABYY.4.1)C0 | 24.02.2026 |
SB2026022440 |
||
| #VU97667 - Memory corruption CVE-2024-38269 |
CWE-119 | Low | 5.42(ABYY.2.2)C0 | 24.09.2024 |
SB2024092440 |
||
| #VU97666 - Memory corruption CVE-2024-38268 |
CWE-119 | Low | 5.42(ABYY.2.2)C0 | 24.09.2024 |
SB2024092440 |
||
| #VU97665 - Memory corruption CVE-2024-38267 |
CWE-119 | Low | 5.42(ABYY.2.2)C0 | 24.09.2024 |
SB2024092440 |
||
| #VU97664 - Memory corruption CVE-2024-38266 |
CWE-119 | Low | 5.42(ABYY.2.2)C0 | 24.09.2024 |
SB2024092440 |
||
| #VU96717 - Memory corruption CVE-2024-5412 |
CWE-119 | Medium | 5.42(ABYY.2.2)C0 | 03.09.2024 |
SB2024090327 |
||
| #VU62548 - Memory corruption CVE-2022-26414 |
CWE-119 | Low | V5.42(ACBC.1)C0 | 25.04.2022 |
SB2022042503 SB2022042504 SB2022042505 |
||
| #VU62547 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2022-26413 |
CWE-78 | Low | V5.42(ACBC.1)C0 | 25.04.2022 |
SB2022042503 SB2022042504 SB2022042505 |