High severity7.2NVD Advisory· Published Mar 11, 2025· Updated Jun 17, 2026

CVE-2024-11253

Description

A post-authentication command injection vulnerability in the "DNSServer” parameter of the diagnostic function in the Zyxel VMG8825-T50K firmware version V5.50(ABOM.8.5)C0 and earlier could allow an authenticated attacker with administrator privileges to execute operating system (OS) commands on a vulnerable device.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Zyxel/Dm4200 B0 Firmware
cpe:2.3:o:zyxel:dm4200-b0_firmware:*:*:*:*:*:*:*:*
Range: <=5.17\(acbs.1\)c0
Zyxel/Emg5723 T50k Firmware
cpe:2.3:o:zyxel:emg5723-t50k_firmware:*:*:*:*:*:*:*:*
Range: <=5.50\(abom.8.5\)c0
Zyxel/Vmg3927 T50k Firmware
cpe:2.3:o:zyxel:vmg3927-t50k_firmware:*:*:*:*:*:*:*:*
Range: <=5.50\(abom.8.5\)c0
Zyxel/Vmg4005 B50a Firmware
cpe:2.3:o:zyxel:vmg4005-b50a_firmware:*:*:*:*:*:*:*:*
Range: <=5.15\(abqa.2.3\)c0
Zyxel/Vmg4005 B60a Firmware
cpe:2.3:o:zyxel:vmg4005-b60a_firmware:*:*:*:*:*:*:*:*
Range: <=5.15\(abqa.2.3\)c0
Zyxel/Vmg8825 T50k Firmware
cpe:2.3:o:zyxel:vmg8825-t50k_firmware:*:*:*:*:*:*:*:*
Range: <=5.50\(abom.8.5\)c0
Zyxel/VMG8825-T50Kllm-fuzzy2 versions
<=V5.50(ABOM.8.5)C0+ 1 more
- (no CPE)range: <=V5.50(ABOM.8.5)C0
- (no CPE)range: <= V5.50(ABOM.8.5)C0

Patches

Vulnerability mechanics

References

www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-post-authentication-command-injection-vulnerabilities-in-certain-dsl-ethernet-cpe-fiber-ont-and-wifi-extender-devices-03-11-2025nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.468
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000