OS Command Injection in ZyXEL Communications Corp. products - CVE-2025-13943

Vulnerability identifier: #VU123168

CSH Severity: Medium

CVSS v4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Green

CVE-ID: CVE-2025-13943

CWE-ID: CWE-78

Exploitation vector: Remote access

Exploit availability: No public exploit available

Vendor: ZyXEL Communications Corp.

Affected software:
DM4200-B0
DX3300-T0
DX3300-T1
DX3301-T0
DX4510-B1
DX5401-B1
EE3301-00
EE5301-00
EE6510-10
EX2210-T0
EX3300-T0
EX3300-T1
EX3301-T0
EX3500-T0
EX3501-T0
EX3510-B1
EX3600-T0
EX5401-B1
EX5512-T0
EX5601-T0
EX5601-T1
EX7501-B0
EX7710-B0
GM4100-B0
VMG4005-B50A
VMG4005-B60A
AM7510-00
AX7501-B1
PE3301-00
PE5301-01
PM3100-T0
PM5100-T0
PM5100-T1
PM7500-00
PX3321-T1
PX5301-T0
WE3300-00
WE4600-00
WX3100-T0
WX3401-B1
WX5600-T0
WX5610-B0
DX4510-B0
EMG3525-T50B
EMG5523-T50B
EMG6726-B10A
EX3510-B0
EX5510-B0
VMG3625-T50B
VMG4927-B50A
VMG8623-T50B
PM7300-T0

The vulnerability allows a remote attacker to execute arbitrary shell commands on the target system.

The vulnerability exists due to improper input validation in the log file download function. A remote user can pass specially crafted data to the application and execute arbitrary OS commands on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Install updates from vendor's website.

• https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-null-pointer-dereference-and-command-injection-vulnerabilities-in-certain-4g-lte-5g-nr-cpe-dsl-ethernet-cpe-fiber-onts-security-routers-and-wireless-extenders-02-24-2026