A post-authentication command injection vulnerability in the “DomainName” parameter of the DHCP configuration file in Zyxel DX3301-T0 and EX3301-T0 firmware versions through 5.50(ABVY.7.1)C0 could allow an authenticated attacker with administrator privileges to execute OS commands on an affected device.
| Vendor | Product | Versions |
|---|---|---|
| zyxel | dx3301-t0 firmware | <= 5.50(ABVY.7.1)C0, <= 5.50(ABVY.7.1)C0 |
Updated severity to CRITICAL and marked the vulnerability as actively exploited.
Initial creation
