CVE-2025-13942 - Exploits & Severity

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)

A command injection vulnerability exists in the UPnP function of the Zyxel EX3510-B0 firmware versions through 5.17(ABUP.15.1)C0. The vulnerability stems from improper neutralization of special elements used in OS commands, allowing remote attackers to execute arbitrary operating system commands on affected devices.

A remote attacker can exploit this vulnerability by sending specially crafted UPnP SOAP requests to execute arbitrary OS commands on the affected device. This could result in complete compromise of the device with high impact to confidentiality, integrity, and availability. An attacker could potentially gain full control of the device, access sensitive data, modify configurations, or disrupt network services. No user interaction or privileged access is required to exploit this vulnerability.

There is no evidence that a public proof-of-concept exists. There is no evidence of proof of exploitation at the moment.

No patch information available in the provided data.

For Zyxel EX3510-B0 devices running firmware version 5.17(ABUP.15.1)C0 or earlier, organizations should: (1) Monitor for available firmware updates from Zyxel immediately; (2) Implement network segmentation to restrict UPnP traffic from untrusted sources; (3) Disable UPnP functionality if not required for operations; (4) Restrict network access to affected devices to only authorized networks; (5) Monitor device logs for suspicious UPnP SOAP requests.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Feedly found the first article mentioning CVE-2025-13942 . See article

NVD published the first details for CVE-2025-13942

A CVSS base score of 9.8 has been assigned.

CVE-2025-40540 is a critical type confusion vulnerability in Serv-U, with a CVSS score of 9.1, allowing attackers with administrative privileges to execute arbitrary native code on the affected system. At the time of writing, there are no public proof-of-concept exploits, patch details, or mitigations available. The risk is somewhat mitigated on Windows deployments due to Serv-U services typically running under less-privileged accounts, but the vulnerability remains severe once exploited. See article

Serv-U Type Confusion: Critical RCE (CVE-2025-40540)

CVE-2025-13942 - Exploits & Severity - Feedly

Serv-U Type Confusion: Critical RCE (CVE-2025-40540)

CVE-2025-13942 | Zyxel EX3510-B0 up to 5.17(ABUP.15.1)C0 UPnP SOAP Request os command injection

Collect, analyze, and vulnerability reports faster using AI