CVE-2015-6018: Zyxel PMG5318-b20a Firmware

Critical severity, CVSS 9.8. EPSS: 20.8% chance of exploitation in the next 30 days.

The diagnostic-ping implementation on ZyXEL PMG5318-B20A devices with firmware before 1.00(AANC.2)C0 allows remote attackers to execute arbitrary commands via the PingIPAddr parameter.

Affected products

• Zyxel PMG5318-b20a Firmware: up to and including v100aanc0b5

Published 2015-12-31. Last modified 2026-06-17.