Path Traversal Vulnerability in Zyxel AMG1302-T10B Firmware

CVE-2025-3577

What is CVE-2025-3577?

A path traversal vulnerability exists within the web management interface of the Zyxel AMG1302-T10B device, allowing an authenticated attacker with administrator privileges to gain unauthorized access to restricted directories. By crafting a specific HTTP request, the attacker can exploit this flaw to navigate the file system beyond the intended boundaries and potentially expose sensitive data. This vulnerability accentuates the importance of securing device configurations and regular firmware updates.

References