CVE-2025-3577

Medium · 4.9

CVSS

4.9

EPSS

12.6%

Published

Apr 22, 2025

CISA due date

—

The record

**UNSUPPORTED WHEN ASSIGNED** A path traversal vulnerability in the web management interface of the Zyxel AMG1302-T10B firmware version 2.00(AAJC.16)C0 could allow an authenticated attacker with administrator privileges to access restricted directories by sending a crafted HTTP request to an affected device.

Affected packages

Ecosystem	Package	Introduced	Fixed