CVE-2025-6599An uncontrolled resource consumption vulnerability in the web server of Zyxel DX3301-T0 firmware version 5.50(ABVY.6.3)C0 and earlier could allow an attacker to perform Slowloris‑style denial‑of‑serv…
Updated under an hour ago ()
Does this affect you?
It affects zyxel lte3301-plus_firmware and 59 other products. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
An uncontrolled resource consumption vulnerability in the web server of Zyxel DX3301-T0 firmware version 5.50(ABVY.6.3)C0 and earlier could allow an attacker to perform Slowloris‑style denial‑of‑service (DoS) attacks. Such attacks may temporarily block legitimate HTTP requests and partially disrupt access to the web management interface, while other networking services remain unaffected.
- CVSS
- 7.5 HIGH (v3.1, NVD)CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- Weakness (CWE)
- CWE-400
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Not given
- NVD analysis
- Analyzed
- Record last updated
- Oct 18, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
zyxel lte3301-plus_firmware zyxel:lte3301-plus_firmware | through 1.00\(abqu.7\)c0 | NVD |
zyxel nr5103_firmware zyxel:nr5103_firmware | through 4.19\(abyc.8\)c0 | NVD |
zyxel nr5103e_firmware zyxel:nr5103e_firmware | through 1.00\(acdj.1\)c0 | NVD |
zyxel nr5309_firmware zyxel:nr5309_firmware | through 1.00\(ackp.1\)b3 | NVD |
zyxel nr7302_firmware zyxel:nr7302_firmware | through 5.00\(acha.5\)c0 | NVD |
zyxel nr7303_firmware zyxel:nr7303_firmware | through 1.00\(acei.1\)c0 | NVD |
zyxel nebula_fwa505_firmware zyxel:nebula_fwa505_firmware | through 1.19\(acko.0\)c0 | NVD |
zyxel nebula_fwa510_firmware zyxel:nebula_fwa510_firmware | through 1.20\(acgd.1\)c0 | NVD |
zyxel nebula_fwa515_firmware zyxel:nebula_fwa515_firmware | through 1.50\(acpz.0\)c0 | NVD |
zyxel nebula_fwa710_firmware zyxel:nebula_fwa710_firmware | through 1.20\(acgc.0\)c0 | NVD |
zyxel dm4200-b0_firmware zyxel:dm4200-b0_firmware | through 5.17\(acbs.1.3\)c0 | NVD |
zyxel dx3300-t0_firmware zyxel:dx3300-t0_firmware | through 5.50\(abvy.6.3\)c0 | NVD |
zyxel dx3300-t1_firmware zyxel:dx3300-t1_firmware | through 5.50\(abvy.6.3\)c0 | NVD |
zyxel dx3301-t0_firmware zyxel:dx3301-t0_firmware | through 5.50\(abvy.6.3\)c0 | NVD |
zyxel dx4510-b1_firmware zyxel:dx4510-b1_firmware | through 5.17\(abyl.9\)c0 | NVD |
zyxel dx5401-b0_firmware zyxel:dx5401-b0_firmware | through 5.17\(abyo.7\)b2 | NVD |
zyxel dx5401-b1_firmware zyxel:dx5401-b1_firmware | through 5.17\(abyo.7\)b2 | NVD |
zyxel ee3301-00_firmware zyxel:ee3301-00_firmware | through 5.63\(acmu.1.1\)c0 | NVD |
zyxel ee5301-00_firmware zyxel:ee5301-00_firmware | through 5.63\(acld.1.1\)c0 | NVD |
zyxel ee6510-10_firmware zyxel:ee6510-10_firmware | through 5.19\(acjq.3\)c0 | NVD |
zyxel ex3300-t0_firmware zyxel:ex3300-t0_firmware | through 5.50\(abvy.6.3\)c0; through 5.50\(acdi.2.1\)c0 | NVD |
zyxel ex3300-t1_firmware zyxel:ex3300-t1_firmware | through 5.50\(abvy.6.3\)c0 | NVD |
zyxel ex3301-t0_firmware zyxel:ex3301-t0_firmware | through 5.50\(abvy.6.3\)c0 | NVD |
zyxel ex3500-t0_firmware zyxel:ex3500-t0_firmware | through 5.44\(achr.4\)c0 | NVD |
zyxel ex3501-t0_firmware zyxel:ex3501-t0_firmware | through 5.44\(achr.4\)c0 | NVD |
zyxel ex3600-t0_firmware zyxel:ex3600-t0_firmware | through 5.70\(acif.1.2\)c0 | NVD |
zyxel ex5401-b0_firmware zyxel:ex5401-b0_firmware | through 5.17\(abyo.7\)b2 | NVD |
zyxel ex5401-b1_firmware zyxel:ex5401-b1_firmware | through 5.17\(abyo.7\)b2 | NVD |
zyxel ex5501-b0_firmware zyxel:ex5501-b0_firmware | through 5.17\(abry.5.5\)c0 | NVD |
zyxel ex5510-b0_firmware zyxel:ex5510-b0_firmware | through 5.17\(abqx.10\)c0 | NVD |
zyxel ex5512-t0_firmware zyxel:ex5512-t0_firmware | through 5.70\(aceg.5\)c0 | NVD |
zyxel ex5601-t0_firmware zyxel:ex5601-t0_firmware | through 5.70\(acdz.4.1\)c0 | NVD |
zyxel ex5601-t1_firmware zyxel:ex5601-t1_firmware | through 5.70\(acdz.4.1\)c0 | NVD |
zyxel ex7501-b0_firmware zyxel:ex7501-b0_firmware | through 5.18\(achn.2.1\)c0 | NVD |
zyxel ex7710-b0_firmware zyxel:ex7710-b0_firmware | through 5.18\(acak.1.4\)c0 | NVD |
zyxel emg3525-t50b_firmware zyxel:emg3525-t50b_firmware | through 5.50\(abpm.9.5\)c0 | NVD |
zyxel emg5523-t50b_firmware zyxel:emg5523-t50b_firmware | through 5.50\(abpm.9.5\)c0 | NVD |
zyxel emg5723-t50k_firmware zyxel:emg5723-t50k_firmware | through 5.50\(abom.8.6\)c0 | NVD |
zyxel emg6726-b10a_firmware zyxel:emg6726-b10a_firmware | through 5.13\(abnp.8\)c0 | NVD |
zyxel gm4100-b0_firmware zyxel:gm4100-b0_firmware | through 5.18\(accl.1\)c0 | NVD |
zyxel vmg3625-t50b_firmware zyxel:vmg3625-t50b_firmware | through 5.50\(abpm.9.5\)c0 | NVD |
zyxel vmg3927-b50b_firmware zyxel:vmg3927-b50b_firmware | through 5.13\(ably.10\)c0 | NVD |
zyxel vmg3927-t50k_firmware zyxel:vmg3927-t50k_firmware | through 5.50\(abom.8.6\)c0 | NVD |
zyxel vmg4005-b50a_firmware zyxel:vmg4005-b50a_firmware | through 5.17\(abqa.3\)c0 | NVD |
zyxel vmg4005-b60a_firmware zyxel:vmg4005-b60a_firmware | through 5.17\(abqa.3\)c0 | NVD |
zyxel vmg4005-b50b_firmware zyxel:vmg4005-b50b_firmware | through 5.13\(abrl.5.3\)c0 | NVD |
zyxel vmg4927-b50a_firmware zyxel:vmg4927-b50a_firmware | through 5.13\(ably.10\)c0 | NVD |
zyxel vmg8623-t50b_firmware zyxel:vmg8623-t50b_firmware | through 5.50\(abpm.9.5\)c0 | NVD |
zyxel vmg8825-t50k_firmware zyxel:vmg8825-t50k_firmware | through 5.50\(abom.8.6\)c0 | NVD |
zyxel ax7501-b0_firmware zyxel:ax7501-b0_firmware | through 5.17\(abpc.6.1\)c0 | NVD |
zyxel ax7501-b1_firmware zyxel:ax7501-b1_firmware | through 5.17\(abpc.6.1\)c0 | NVD |
zyxel pe3301-00_firmware zyxel:pe3301-00_firmware | through 5.63\(acmt.1.1\)c0 | NVD |
zyxel pe5301-01_firmware zyxel:pe5301-01_firmware | through 5.63\(acoj.1.1\)c0 | NVD |
zyxel pm3100-t0_firmware zyxel:pm3100-t0_firmware | through 5.42\(acbf.3\)c0 | NVD |
zyxel pm5100-t0_firmware zyxel:pm5100-t0_firmware | through 5.42\(acbf.3\)c0 | NVD |
zyxel pm7500-00_firmware zyxel:pm7500-00_firmware | through 5.61\(ackk.1\)c0 | NVD |
zyxel pm7300-t0_firmware zyxel:pm7300-t0_firmware | through 5.42\(abyy.3\)c0 | NVD |
zyxel px3321-t1_firmware zyxel:px3321-t1_firmware | through 5.44\(acjb.1.3\)c0; through 5.44\(achk.1\)c0 | NVD |
zyxel px5301-t0_firmware zyxel:px5301-t0_firmware | through 5.44\(ackb.0.4\)c0 | NVD |
zyxel scr_50axe_firmware zyxel:scr_50axe_firmware | through 1.10\(acgn.3\)c0 | NVD |
References
- https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-uncontrolled-resource-consumption-and-command-injection-vulnerabilities-in-certain-4g-lte-5g-nr-cpe-dsl-ethernet-cpe-fiber-onts-security-routers-and-wireless-extenders-11-18-2025vendor-advisory
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.