CVE-2022-40602: Zyxel LTE3301-m209 Firmware

Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days.

A flaw in the Zyxel LTE3301-M209 firmware verisons prior to V1.00(ABLG.6)C0 could allow a remote attacker to access the device using an improper pre-configured password if the remote administration feature has been enabled by an authenticated administrator.

Affected products

• Zyxel LTE3301-m209 Firmware: before 1.00\(ablg.6\)c0 (fixed in 1.00\(ablg.6\)c0)

Published 2022-11-22. Last modified 2026-06-17.