CVE-2025-6599
MEDIUM5.3CVSS v3
—CVSS v2
0.34%
EPSS (exploit probability)
CWE-400CWE
Description
An uncontrolled resource consumption vulnerability in the web server of Zyxel DX3301-T0 firmware version 5.50(ABVY.6.3)C0 and earlier could allow an attacker to perform Slowloris‑style denial‑of‑service (DoS) attacks. Such attacks may temporarily block legitimate HTTP requests and partially disrupt access to the web management interface, while other networking services remain unaffected.
CVSS v3 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Affected routers (1)
| Vendor | Model | Matched via | Affected versions | Fixed in | Patch Status |
|---|---|---|---|---|---|
| Zyxel | Zyxel AX7501-B0 | — |
versionEndIncluding=5.17\(abpc.6.1\)c0 | — | Patched |