Zyxel NR5103E Firmware vulnerabilities

3 CVEs affecting Zyxel NR5103E Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-6599, published 2025-11-18.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2022-43389, published 2023-01-11. Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days. A buffer overflow vulnerability in the library of the web server in Zyxel NR7101 firmware prior to V1.15(ACCC.3)C0, which could allow an unauthenticated attacker to execute some OS commands or to…
CVE-2025-6599, published 2025-11-18. High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days. An uncontrolled resource consumption vulnerability in the web server of Zyxel DX3301-T0 firmware version 5.50(ABVY.6.3)C0 and earlier could allow an attacker to perform Slowloris‑style…
CVE-2024-0816, published 2024-05-21. Medium severity, CVSS 5.5. EPSS: 0.1% chance of exploitation in the next 30 days. The buffer overflow vulnerability in the DX3300-T1 firmware version V5.50(ABVY.4)C0 could allow an authenticated local attacker to cause denial of service (DoS) conditions by executing the CLI…