PT-2025-29534 · Zyxel · Zyxel Nwa50Ax Pro

CVE-2025-6265

·

Publicado

2025-07-15

·

Atualizado

2025-07-29

CVSS v2.0

9.0

Alta

VetorAV:N/AC:L/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Zyxel NWA50AX PRO firmware versions 7.10(ACGE.2) and earlier
Description A path traversal vulnerability exists in the file upload-cgi CGI program. This could allow an authenticated attacker with administrator privileges to access specific directories and delete files, such as the configuration file, on the affected device.
Recommendations Update Zyxel NWA50AX PRO firmware to a version later than 7.10(ACGE.2).

Correção

Path traversal

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

BDU:2025-09788
CVE-2025-6265

Produtos afetados

Zyxel Nwa50Ax Pro