Skip to content
OpenAdvisories
High · 8.8 CVE-2025-8693 EUVD-2025-197902GHSA-jvj8-73h8-vqf9

A post-authentication command injection vulnerability in the "priv" parameter of Zyxel DX3300-T0 firmware version 5.50(ABVY.6.3)C0 and earl…

Published Nov 18, 2025 · Updated Feb 26, 2026 · Assigned by Zyxel

Vendor: Zyxel Product: DX3300-T0 firmware Category: Network devices

Description

A post-authentication command injection vulnerability in the "priv" parameter of Zyxel DX3300-T0 firmware version 5.50(ABVY.6.3)C0 and earlier could allow an authenticated attacker to execute operating system (OS) commands on an affected device.

Affected products

VendorProductAffectedFixed
Zyxel DX3300-T0 firmware <= 5.50(ABVY.6.3)C0 —

References