Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2025-8078

A post-authentication command injection vulnerability in Zyxel ATP series firmware versions from V4.32 through V5.40, USG FLEX series firmware versions from V4.50 through V5.40, USG FLEX 50(W) series firmware versions from V4.16 through V5.40, and USG20(W)-VPN series firmware versions from V4.16 through V5.40 could allow an authenticated attacker with administrator privileges to execute operating system (OS) commands on the affected device by passing a crafted string as an argument to a CLI comm
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:4020305123a20579533f914b68a16fe30a0d4be0b741ef411adc1cc077d1899a
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 4 assertions

{"defaultStatus":"unaffected","product":"USG FLEX 50(W) series firmware","vendor":"Zyxel","versions":[{"status":"affected","version":"versions from V4.16 through V5.40"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:07af41f190d23a130dda07ed50ffc330283df98d58396f04acb7d54def74b475 · sha256:043ff6f47f6384fa… · /containers/cna/affected/2

{"defaultStatus":"unaffected","product":"USG FLEX series firmware","vendor":"Zyxel","versions":[{"status":"affected","version":"version from V4.50 through V5.40"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:07af41f190d23a130dda07ed50ffc330283df98d58396f04acb7d54def74b475 · sha256:043ff6f47f6384fa… · /containers/cna/affected/1

{"defaultStatus":"unaffected","product":"ATP series firmware","vendor":"Zyxel","versions":[{"status":"affected","version":"versions from V4.32 through V5.40"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:07af41f190d23a130dda07ed50ffc330283df98d58396f04acb7d54def74b475 · sha256:043ff6f47f6384fa… · /containers/cna/affected/0

{"defaultStatus":"unaffected","product":"USG20(W)-VPN series firmware","vendor":"Zyxel","versions":[{"status":"affected","version":"versions from V4.16 through V5.40"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:07af41f190d23a130dda07ed50ffc330283df98d58396f04acb7d54def74b475 · sha256:043ff6f47f6384fa… · /containers/cna/affected/3

Affected products and versions

4 source assertions
{"defaultStatus":"unaffected","product":"USG FLEX 50(W) series firmware","vendor":"Zyxel","versions":[{"status":"affected","version":"versions from V4.16 through V5.40"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:07af41f190d23a130dda07ed50ffc330283df98d58396f04acb7d54def74b475 · sha256:043ff6f47f6384fa… · /containers/cna/affected/2
{"defaultStatus":"unaffected","product":"USG FLEX series firmware","vendor":"Zyxel","versions":[{"status":"affected","version":"version from V4.50 through V5.40"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:07af41f190d23a130dda07ed50ffc330283df98d58396f04acb7d54def74b475 · sha256:043ff6f47f6384fa… · /containers/cna/affected/1
{"defaultStatus":"unaffected","product":"ATP series firmware","vendor":"Zyxel","versions":[{"status":"affected","version":"versions from V4.32 through V5.40"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:07af41f190d23a130dda07ed50ffc330283df98d58396f04acb7d54def74b475 · sha256:043ff6f47f6384fa… · /containers/cna/affected/0
{"defaultStatus":"unaffected","product":"USG20(W)-VPN series firmware","vendor":"Zyxel","versions":[{"status":"affected","version":"versions from V4.16 through V5.40"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:07af41f190d23a130dda07ed50ffc330283df98d58396f04acb7d54def74b475 · sha256:043ff6f47f6384fa… · /containers/cna/affected/3

Provider-owned CVSS observations

1 source assertion
{"metric":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.2,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"HIGH","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"metric_type":"cvssV3_1"}
  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:07af41f190d23a130dda07ed50ffc330283df98d58396f04acb7d54def74b475 · sha256:043ff6f47f6384fa… · /containers/cna/metrics/0/cvssV3_1

CWE assertions

1 source assertion
{"cweId":"CWE-78","description":"CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')","lang":"en","type":"CWE"}
  • cve_program_cvelist_v5cwe
    urn:baitaphish:normalized-source-record:v2:07af41f190d23a130dda07ed50ffc330283df98d58396f04acb7d54def74b475 · sha256:043ff6f47f6384fa… · /containers/cna/problemTypes/0/descriptions/0

Source references

1 source assertion
{"tags":["vendor-advisory"],"url":"https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-post-authentication-command-injection-and-missing-authorization-vulnerabilities-in-zld-firewalls-10-21-2025"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:07af41f190d23a130dda07ed50ffc330283df98d58396f04acb7d54def74b475 · sha256:043ff6f47f6384fa… · /containers/cna/references/0

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer