CVE-2025-13942Patch(zyxel / dx4510-b0)

Zyxel has published 2 CVEs for some vulns I found :D CVE-2025-13943: Authenticated command injection in log export CGI CVE-2025-13942: Unauthenticated command injection in UPnP daemon I will blog about this in the coming months. Meanwhile, exploits here: https://github.com/hacefresko/CVEs

Zyxel issues urgent patches for a critical 9.8 severity flaw (CVE-2025-13942) in UPnP functions that allows remote attackers to execute OS commands. Patch now! #Zyxel #CyberSecurity #CVE202513942 #RouterSecurity #InfoSec #RCE #PatchAlert #Vulnerability https://securityonline.info/total-takeover-critical-zyxel-flaw-cvss-9-8-exposes-routers-to-remote-command-injection/

🚨 ALERTĂ: CVE-2025-13942 este o vulnerabilitate critică, cu scor CVSS v3.1 de 9.8, de tip “OS Command Injection” care afectează funcția Universal Plug and Play (UPnP) din mai multe echipamente Zyxel. 👉 https://www.dnsc.ro/citeste/alerta-vulnerabilitate-critica-identificata-in-mai-multe-echipamente-zyxel #DNSC https://t.co/yDt3fgFgIq

Zyxel patches critical RCE flaw CVE-2025-13942 impacting 4G/5G CPE, DSL/Ethernet CPE, fiber ONT, and wireless extenders. Exploits require UPnP and WAN enabled. End-of-life devices remain at risk. #ZyxelRouters #RemoteExec #USA https://ift.tt/Ofnjoki

Zyxel patches critical RCE bug CVE-2025-13942 in UPnP affecting 4G/5G CPE, DSL/Ethernet CPE, Fiber ONTs and extenders, enabling unauthenticated remote OS command execution on routers. https://threatcluster.io/cluster/zyxel-addresses-critical-rce-flaw-in-multiple-router-models-f90df6a8

CRITICAL CVE ALERT ‼️🚨 Zyxel has released security updates to address a critical vulnerability, CVE-2025-13942, which affects over a dozen router models. To find out more on how to patch, please visit the link below: https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-null-pointer-dereference-and-command-injection-vulnerabilities-in-certain-4g-lte-5g-nr-cpe-dsl-ethernet-cpe-fiber-onts-security-routers-and-wireless-extenders-02-24-2026

Zyxel Router の複数の脆弱性が FIX：OS コマンド実行や DoS 攻撃の恐れ https://iototsecnews.jp/2026/02/25/critical-zyxel-router-flaw-exposed-devices-to-remote-attacks/ Zyxel が、家庭用／ビジネス用のルーターやエクステンダーを含む、複数の製品に存在する深刻なリモートコード実行 (RCE) の脆弱性 CVE-2025-13942 などを修正するファームウェア・アップデートを公開しました。この脆弱性は、ネットワーク内のデバイス同士を自動接続するための規格である UPnP (Universal Plug and Play) の処理過程に存在する、コマンド・インジェクションの欠陥に起因しており、12モデル以上のデバイスに影響を及ぼします。その他にも、複数の脆弱性が FIX していますので、詳細についてはベンダーのアドバイザリを、ご参照ください。 #CVE202511845 #CVE202511846 #CVE202511847 #CVE202511848 #CVE202513942 #CVE202513943 #CVE20261459 #Vulnerability #Zyxel

@CveTodo 🚨 **CVE-2025-13942** is a high-severity command injection vulnerability in the UPnP service of Zyxel EX3510-B0 routers running firmware versions up to 5.17(ABUP.15.1)C0. CVSS score estimated at 9.8/10 based on similar flaws. #CyberSecurity #Vulnerability

**CVE-2025-13942** is a command injection vulnerability affecting the UPnP (Universal Plug and Play) function in Zyxel EX3510-B0 firmware versions up to 5.17(ABUP.15.1)C0. This flaw allows a remote attacker to execute arbitrary operating system commands on the affected device by sending specially crafted UPnP SOAP requests. #Cybersecurity #CVE #CriticalCVE #CriticalVulnerability #RemoteCodeExecution https://cvetodo.com/cve/CVE-2025-13942

CVE-2025-13942 (CVSS:9.8, CRITICAL) is Analyzed. A command injection vulnerability in the UPnP function of the Zyxel EX3510-B0 firmware versions through 5.17(ABUP.15.1)C..https://nvd.nist.gov/vuln/detail/CVE-2025-13942 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre

CVE-2025-13942 (CVSS:9.8, CRITICAL) is Analyzed. A command injection vulnerability in the UPnP function of the Zyxel EX3510-B0 firmware versions through 5.17(ABUP.15.1)C..https://nvd.nist.gov/vuln/detail/CVE-2025-13942 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre

⚠️ Vulnerabilidades en productos Zyxel ❗ CVE-2026-1459 ❗ CVE-2025-13943 ❗ CVE-2025-13942 ➡️ Más info: https://www.cert.gov.py/vulnerabilidades-en-productos-zyxel-2/ https://t.co/Mm5XqgBCoc

🚨 Zyxel patches critical UPnP command-injection bug enabling unauthenticated RCE on routers Zyxel shipped fixes for a critical UPnP command-injection flaw (CVE-2025-13942) affecting multiple CPE/router models that could let unauthenticated attackers execute OS commands via crafted UPnP SOAP requests when UPnP and WAN access are enabled. Organizations should patch immediately and reduce exposure by disabling UPnP/WAN management, as internet-facing Zyxel devices are frequently targeted. 🎯 Target: Global/Networking (Routers/CPE) #️⃣ Category: #Vulnerability #BlueTeam 🔗 URL: https://www.scworld.com/brief/zyxel-patches-critical-command-injection-vulnerability-in-routers

🚨 @zyxel patches critical CVE-2025-13942 RCE flaw affecting 12+ routers including 4G/5G, DSL/Ethernet, Fiber ONTs, wireless extenders. • Remote OS command execution via UPnP • Exploitation requires WAN + UPnP enabled • 120k+ exposed devices tracked globally Patch now & secure legacy devices like VMG1312-B10 series, SBG3300, SBG3500. Are your business routers up-to-date? Comment below 👇 Like & follow for real-time cybersecurity alerts. #CyberSecurity #NetworkSecurity #IoT #Infosec #RCE #PatchManagement #ThreatIntel #ZeroTrust #RouterSecurity #CVE

Critical Zyxel router vulnerability (CVE-2025-13942) exposes 120K+ devices to unauthenticated RCE. Implement network segmentation, isolate critical systems, deploy hardware firewalls, and maintain air-gapped backups. Verify firmware patches immediately. #TheSovereignProtocol

🚨 Zyxel Patches Critical 9.8 Command Injection Flaw Across Many Router/CPE Models Zyxel fixed multiple high-severity bugs—most notably CVE-2025-13942 (CVSS 9.8), an unauthenticated OS command injection in the UPnP service that can be exploited via crafted UPnP SOAP requests (especially where WAN access + UPnP are enabled). Organizations and SOHO users should urgently update firmware and disable UPnP/WAN exposure where not required to reduce remote takeover risk. 🎯 Target: Global/Networking #️⃣ Category: #Vulnerability #BlueTeam 🔗 URL: https://cyberpress.org/critical-zyxel-router-vulnerabilities-allow-remote-command-injection-attacks/

🚨 Zyxel Fixes Critical 9.8 RCE in Dozens of Devices via UPnP (CVE-2025-13942) Zyxel patched a critical OS command injection flaw (CVSS 9.8) in the UPnP feature that could allow remote attackers to execute OS commands via crafted UPnP SOAP requests—primarily if WAN access and UPnP are enabled. Updates also address additional command injection and DoS bugs across multiple models, making prompt firmware upgrades urgent for exposed deployments. 🎯 Target: Global/Networking #️⃣ Category: #Vulnerability #BlueTeam 🔗 URL: https://www.securityweek.com/zyxel-patches-critical-vulnerability-in-many-device-models/

【リンク集：2月25日〜26日のセキュリティ関連ニュース/記事】 ＜脆弱性＞ ・「極めて高度な」脅威アクターが2023年からCisco SD-WANのゼロデイを悪用（CVE-2026-20127） https://www.helpnetsecurity.com/2026/02/25/cisco-sd-wan-zero-day-cve-2026-20127/ ・米CISA、Cisco Catalyst SD-WANにおけるパストラバーサルの脆弱性（CVE-2022-20775）と同Controller／Managerの認証バイパスの脆弱性（CVE-2026-20127）をKEVカタログに追加 https://www.cisa.gov/known-exploited-vulnerabilities-catalog ・Claude Codeに複数の脆弱性　開発者のマシンを危険にさらす（CVE-2025-59536、CVE-2026-21852他） https://www.darkreading.com/application-security/flaws-claude-code-developer-machines-risk ・Zyxel製ルーターに重大なRCE脆弱性　複数モデルに影響（CVE-2025-13942） https://www.bleepingcomputer.com/news/security/zyxel-warns-of-critical-rce-flaw-affecting-over-a-dozen-routers/ ＜マルウェア・その他脅威＞ ・Androidマルウェア「Oblivion」が偽の更新通知でスマホをハイジャック　月額300ドルで利用可能 https://hackread.com/android-malware-oblivion-fake-updates-hijack-phones/ ・有害NuGetパッケージがASP[.]NETデータを窃取　マルウェアをドロップするnpmパッケージの詳細も公表される https://thehackernews.com/2026/02/malicious-nuget-packages-stole-aspnet.html ・偽「面接」リポジトリでNext.js開発者を騙し、情報窃取型マルウェアを実行 https://www.theregister.com/2026/02/25/jobseeking_nextjs_devs_attack/ ＜ランサムウェア＞ ・サイバー犯罪フォーラムRAMP閉鎖に伴うランサムウェアエコシステムの分裂と再編成https://www.darkreading.com/threat-intelligence/ramp-forum-seizure-fractures-ransomware-ecosystem ＜データ侵害/サイバー犯罪＞ ・医療機器メーカーUFP Technologiesがサイバー攻撃を受ける https://www.securityweek.com/medical-device-maker-ufp-technologies-hit-by-cyberattack/ ・SLHがビッシング攻撃に向けて女性を募集　1件あたり報酬500～1,000ドルを提供 https://thehackernews.com/2026/02/slh-offers-5001000-per-call-to-recruit.html ・Google、中国ハッカーの攻撃を阻止　通信事業者と政府機関が標的に https://www.securityweek.com/google-disrupts-chinese-cyberespionage-campaign-targeting-telecoms-governments/ ＜AI関連＞ ・米国でAIデータセンター建設への反発高まる https://techcrunch.com/2026/02/25/the-public-opposition-to-ai-infrastructure-is-heating-up/ ・AIエージェントによるネットワークスキャンを妨害する方法 https://portspoof.io/blog/ai-agent-cybersecurity-deception ・ハッカーが脆弱性特定時にAnthropicのClaudeを悪用、メキシコ政府のデータ150GBを盗む https://iatoskill.com/news/hackers-exploit-anthropic-claude-to-steal-mexico-data ・米国防長官がAnthropicに圧力、AIのガードレールを速やかに外すよう迫る https://arstechnica.com/ai/2026/02/pete-hegseth-wants-unfettered-access-to-anthropics-models-for-the-military/ ・OpenClaw武器化の実態を探る　ディープウェブやダークウェブ上の議論を分析 https://www.bleepingcomputer.com/news/security/the-openclaw-hype-analysis-of-chatter-from-open-source-deep-and-dark-web/ ・米10代の約12％がAIに情緒的サポートやアドバイス求める https://techcrunch.com/2026/02/25/about-12-of-u-s-teens-turn-to-ai-for-emotional-support-or-advice/ ＜サイバー戦/APT/国家型アクター/地政学関連＞ ・中国がChatGPTを使い、反体制派や日本政府への中傷キャンペーン実施　OpenAIの報告書で明らかに https://www.theregister.com/2026/02/25/chinese_law_enforcement_chatgpt_abuse/ ＜逮捕/テイクダウン/制裁/違反/その他法執行関連＞ ・L3Harris元幹部に拘禁刑判決、ロシアのエクスプロイトブローカーにゼロデイを販売 https://www.bleepingcomputer.com/news/security/ex-l3harris-exec-jailed-for-selling-zero-days-to-russian-exploit-broker/ ・ハッキングツールをロシアに売り渡した米防衛請負業者の真相 https://techcrunch.com/2026/02/25/inside-the-story-of-the-us-defense-contractor-who-leaked-hacking-tools-to-russia/ ・米国、盗まれたゼロデイを購入したロシア人ブローカーに制裁 https://www.bleepingcomputer.com/news/security/us-sanctions-russian-exploit-broker-for-buying-stolen-zero-days/ ・MarquisがSonicWallを提訴　ランサムウェア攻撃につながったバックアップ侵害めぐり https://www.bleepingcomputer.com/news/security/marquis-sues-sonicwall-over-backup-breach-that-led-to-ransomware-attack/ ＜リサーチ/攻撃手法/TTP＞ ・Agent Teslaキャンペーンの多段階攻撃チェーンを分析 https://www.fortinet.com/blog/threat-research/unmasking-agent-tesla-deep-dive-into-multi-stage-campaign ・中国国家情報技術セキュリティ研究センターは人民解放軍サイバー部隊の一部なのか？ https://www.nattothoughts.com/p/chinas-national-research-center-for ・偽のZoomミーティングから監視ソフトがサイレントインストールされる https://www.helpnetsecurity.com/2026/02/25/fake-zoom-meeting-teramind-surveillance-software/ ・サイバー攻撃の平均ブレイクアウトタイムが30分未満に　CrowdStrikeが報告 https://www.scworld.com/news/crowdstrike-average-cyberattack-breakout-time-now-under-30-minutes ＜政府/政策＞ ・米CISA、運営危機に直面か　トランプ政権による人員削減とレイオフが大きく影響 https://techcrunch.com/2026/02/25/us-cybersecurity-agency-cisa-reportedly-in-dire-shape-amid-trump-cuts-and-layoffs/ ・米政権、外交員によるロビー活動で諸外国のデータ主権法に対抗へ https://techcrunch.com/2026/02/25/us-tells-diplomats-to-lobby-against-foreign-data-sovereignty-laws/ ＜プライバシー＞ ・周辺のスマートグラスを検知できるアプリが開発される https://www.malwarebytes.com/blog/news/2026/02/developer-creates-app-to-detect-nearby-smart-glasses

Zyxel has released updates for over a dozen router models to fix a critical vulnerability, CVE-2025-13942, allowing remote command execution. While exploitation requires specific settings to be enabled, users should install the patches. Zyxel also addressed two high-severity flaws, CVE-2025-13943 and CVE-2026-1459, which require compromised credentials. If your Zyxel router model is end-of-life, Zyxel advises replacing it since no further patches will be issued. ⚠️ #CyberNewsLive https://bleepingcomputer.com/news/security/zyxel-warns-of-critical-rce-flaw-affecting-over-a-dozen-routers/

🚨 Critical Zyxel router UPnP command-injection flaw enables unauth remote OS command execution Zyxel patched CVE-2025-13942 (CVSS 9.8), a UPnP command-injection bug affecting 4G/5G CPE, DSL/Ethernet CPE, Fiber ONTs, and wireless extenders that can allow unauth attackers to run OS commands via crafted UPnP SOAP requests (only if WAN access and UPnP are enabled). Zyxel also disclosed additional DoS and post-auth command-injection issues (incl. CVE-2026-1459 / CVE-2025-13943), urging immediate firmware updates to prevent device takeover. 🎯 Target: Global/Telecom & Home Router Users #️⃣ Category: #Vulnerability #BlueTeam 🔗 URL: https://securityaffairs.com/188501/security/critical-zyxel-router-flaw-exposed-devices-to-remote-attacks.html