CVE-2025-8693
HIGHCVSS 8.8/10EPSS 0.97%
Last modified
CVE-2025-8693 is a high-severity vulnerability rated 8.8/10 on the CVSS scale. A post-authentication command injection vulnerability in the "priv" parameter of Zyxel DX3300-T0 firmware version 5.50(ABVY.6.3)C0 and earlier could allow an authenticated attacker to execute operating system (OS) commands on an affected device.. EPSS estimates a 0.97% chance of exploitation in the next 30 days.
Description
A post-authentication command injection vulnerability in the "priv" parameter of Zyxel DX3300-T0 firmware version 5.50(ABVY.6.3)C0 and earlier could allow an authenticated attacker to execute operating system (OS) commands on an affected device.
Metrics
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Zyxel | Dm4200-B0 Firmware | <= 5.17\(acbs.1.3\)c0 |
| Zyxel | Dx3300-T0 Firmware | <= 5.50\(abvy.6.3\)c0 |
| Zyxel | Dx3300-T1 Firmware | <= 5.50\(abvy.6.3\)c0 |
| Zyxel | Dx3301-T0 Firmware | <= 5.50\(abvy.6.3\)c0 |
| Zyxel | Dx4510-B1 Firmware | <= 5.17\(abyl.9\)c0 |
| Zyxel | Dx5401-B0 Firmware | <= 5.17\(abyo.7\)b2 |
| Zyxel | Dx5401-B1 Firmware | <= 5.17\(abyo.7\)b2 |
| Zyxel | Ee3301-00 Firmware | <= 5.63\(acmu.1.1\)c0 |
| Zyxel | Ee5301-00 Firmware | <= 5.63\(acld.1.1\)c0 |
| Zyxel | Ee6510-10 Firmware | <= 5.19\(acjq.3\)c0 |
| Zyxel | Ex3300-T0 Firmware | <= 5.50\(abvy.6.3\)c0 |
| Zyxel | Ex3300-T0 Firmware | <= 5.50\(acdi.2.1\)c0 |
| Zyxel | Ex3300-T1 Firmware | <= 5.50\(abvy.6.3\)c0 |
| Zyxel | Ex3301-T0 Firmware | <= 5.50\(abvy.6.3\)c0 |
| Zyxel | Ex3500-T0 Firmware | <= 5.44\(achr.4\)c0 |
| Zyxel | Ex3501-T0 Firmware | <= 5.44\(achr.4\)c0 |
| Zyxel | Ex3510-B0 Firmware | <= 5.17\(abup.15\)c0 |
| Zyxel | Ex3510-B1 Firmware | <= 5.17\(abup.15\)c0 |
| Zyxel | Ex3600-T0 Firmware | <= 5.70\(acif.1.2\)c0 |
| Zyxel | Ex5401-B0 Firmware | <= 5.17\(abyo.7\)b2 |
| Zyxel | Ex5401-B1 Firmware | <= 5.17\(abyo.7\)b2 |
| Zyxel | Ex5501-B0 Firmware | <= 5.17\(abry.5.5\)c0 |
| Zyxel | Ex5510-B0 Firmware | <= 5.17\(abqx.10\)c0 |
| Zyxel | Ex5512-T0 Firmware | <= 5.70\(aceg.5\)c0 |
| Zyxel | Ex5601-T0 Firmware | <= 5.70\(acdz.4.1\)c0 |
| Zyxel | Ex5601-T1 Firmware | <= 5.70\(acdz.4.1\)c0 |
| Zyxel | Ex7501-B0 Firmware | <= 5.18\(achn.2.1\)c0 |
| Zyxel | Ex7710-B0 Firmware | <= 5.18\(acak.1.4\)c0 |
| Zyxel | Emg3525-T50b Firmware | <= 5.50\(abpm.9.5\)c0 |
| Zyxel | Emg5523-T50b Firmware | <= 5.50\(abpm.9.5\)c0 |
| Zyxel | Emg5723-T50k Firmware | <= 5.50\(abom.8.6\)c0 |
| Zyxel | Gm4100-B0 Firmware | <= 5.18\(accl.1\)c0 |
| Zyxel | Vmg3625-T50b Firmware | <= 5.50\(abpm.9.5\)c0 |
| Zyxel | Vmg3927-T50k Firmware | <= 5.50\(abom.8.6\)c0 |
| Zyxel | Vmg4005-B50a Firmware | <= 5.17\(abqa.3\)c0 |
| Zyxel | Vmg4005-B60a Firmware | <= 5.17\(abqa.3\)c0 |
| Zyxel | Vmg4005-B50b Firmware | <= 5.13\(abrl.5.3\)c0 |
| Zyxel | Vmg8623-T50b Firmware | <= 5.50\(abpm.9.5\)c0 |
| Zyxel | Vmg8825-T50k Firmware | <= 5.50\(abom.8.6\)c0 |
| Zyxel | Ax7501-B0 Firmware | <= 5.17\(abpc.6.1\)c0 |
| Zyxel | Ax7501-B1 Firmware | <= 5.17\(abpc.6.1\)c0 |
| Zyxel | Pe3301-00 Firmware | <= 5.63\(acmt.1.1\)c0 |
| Zyxel | Pe5301-01 Firmware | <= 5.63\(acoj.1.1\)c0 |
| Zyxel | Pm3100-T0 Firmware | <= 5.42\(acbf.3\)c0 |
| Zyxel | Pm5100-T0 Firmware | <= 5.42\(acbf.3\)c0 |
| Zyxel | Pm7500-00 Firmware | <= 5.61\(ackk.1\)c0 |
| Zyxel | Pm7300-T0 Firmware | <= 5.42\(abyy.3\)c0 |
| Zyxel | Px3321-T1 Firmware | <= 5.44\(acjb.1.3\)c0 |
| Zyxel | Px3321-T1 Firmware | <= 5.44\(achk.1\)c0 |
| Zyxel | Px5301-T0 Firmware | <= 5.44\(ackb.0.4\)c0 |
Showing 50 of 56 affected configurations. See NVD for the full list.
References
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2025-8693?
A post-authentication command injection vulnerability in the "priv" parameter of Zyxel DX3300-T0 firmware version 5.50(ABVY.6.3)C0 and earlier could allow an authenticated attacker to execute operating system (OS) commands on an affected device.
How severe is CVE-2025-8693?
CVE-2025-8693 has a CVSS score of 8.8/10 (HIGH severity). The EPSS model estimates a 0.97% probability of exploitation in the next 30 days.
How do I fix CVE-2025-8693?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2025
- CVE-2025-8687The Enter Addons plugin for WordPress is vulnerable to Store…6.4
- CVE-2025-8688The Inline Stock Quotes plugin for WordPress is vulnerable t…6.4
- CVE-2025-8689The Elements Plus! plugin for WordPress is vulnerable to Sto…6.4
- CVE-2025-8690The Simple Responsive Slider plugin for WordPress is vulnera…6.4
- CVE-2025-8691The WP Scriptcase plugin for WordPress is vulnerable to Stor…6.4
- CVE-2025-8692The Coupon API plugin for WordPress is vulnerable to SQL Inj…4.9
- CVE-2025-8695Improper Neutralization of Input During Web Page Generation …5.4
- CVE-2025-8696If an unauthenticated user sends a large amount of data to t…7.5
- CVE-2025-8697A vulnerability was found in agentUniverse up to 0.0.18 and …6.3
- CVE-2025-8698A vulnerability was found in Open5GS up to 2.7.5. It has bee…3.3
- CVE-2025-8699Some "Stored Value" Unattended Payment Solutions of KioSoft …9.1
- CVE-2025-8700Invoice Ninja's configuration on macOS, specifically the pre…4.8
Are you affected by CVE-2025-8693?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST