Unrated severityNVD Advisory· Published Mar 11, 2025· Updated Feb 26, 2026

CVE-2024-11253

Description

A post-authentication command injection vulnerability in the "DNSServer” parameter of the diagnostic function in the Zyxel VMG8825-T50K firmware version V5.50(ABOM.8.5)C0 and earlier could allow an authenticated attacker with administrator privileges to execute operating system (OS) commands on a vulnerable device.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Zyxel/VMG8825-T50Kllm-fuzzy2 versions
<= V5.50(ABOM.8.5)C0+ 1 more
- (no CPE)range: <= V5.50(ABOM.8.5)C0
- (no CPE)range: <= V5.50(ABOM.8.5)C0

Patches

Vulnerability mechanics

References

www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-post-authentication-command-injection-vulnerabilities-in-certain-dsl-ethernet-cpe-fiber-ont-and-wifi-extender-devices-03-11-2025mitrevendor-advisory

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000