The Zyxel WRE6505 v2 firmware version V1.00(ABDV.3)C0 contains an authentication vulnerability classified as CWE-307, where the device does not properly limit excessive authentication attempts on its web management interface. This allows an attacker with LAN access to repeatedly attempt to authenticate without effective lockout or throttling, increasing the likelihood of successful brute-force password guessing and unauthorized access.

Successful exploitation would allow an attacker on the local network to bypass authentication by brute-forcing the password, potentially gaining unauthorized access to the device's management interface. This could lead to unauthorized configuration changes or further compromise of the network environment. The CVSS 3.1 base score is 6.5 (medium severity), reflecting the attack vector as adjacent network with low attack complexity and no privileges required.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or mitigation has been announced by Zyxel, users should restrict LAN access to the device's management interface where possible and monitor for unauthorized access attempts. Avoid exposing the management interface to untrusted networks until a fix is available.