This vulnerability involves improper neutralization of special elements in OS commands (CWE-78) within the EasyMesh-related APIs of Zyxel DX3300-T0 firmware versions up to 5.50(ABVY.7.1)C0. It requires the attacker to be authenticated with administrator privileges and adjacent network access. Successful exploitation allows arbitrary OS command execution on the affected device, impacting confidentiality, integrity, and availability. The CVSS 3.1 vector indicates low attack complexity, high privileges required, no user interaction, and high impact on confidentiality, integrity, and availability.

An authenticated attacker with administrator privileges on an adjacent network can execute arbitrary OS commands on the affected device, potentially leading to full compromise of the device's confidentiality, integrity, and availability. This could allow the attacker to manipulate device functions, disrupt services, or gain further network access depending on the device's role.

No official patch or remediation level has been provided by Zyxel for this vulnerability as of the published date. Users should monitor Zyxel's advisories for updates and apply any future firmware updates addressing this issue. Until a fix is available, restrict administrator access to trusted personnel and limit network adjacency to reduce exposure.