Post-Authentication Command Injection Vulnerability in Zyxel DX3300-T0 Firmware

CVE-2025-8693

What is CVE-2025-8693?

A command injection vulnerability exists within the 'priv' parameter of the Zyxel DX3300-T0 firmware, enabling an authenticated attacker to execute arbitrary operating system commands. This issue arises when the firmware processes input data from legitimate authenticated users without sufficient validation, allowing exploitation if proper security measures are not in place. As a result, attackers can potentially gain unauthorized control over the affected device's operating environment.

References