CVE-2006-2562: ZyXEL P-335WT router allows remote attackers to bypass access restrictions and conduct unauthorized operati...

Security readout for executives and security teams

This flaw lets a remote attacker bypass access restrictions on a ZyXEL P-335WT router through UPnP. The reported impact is unauthorized operations such as creating port mappings that forward arbitrary traffic. That can expose internal services unintentionally, but the supplied sources do not provide CVSS scoring, affected firmware versions, or confirmed active exploitation. Exposure is most likely limited to environments still operating ZyXEL P-335WT routers with UPnP enabled or reachable from untrusted networks. The supplied affected-product metadata is incomplete, so inventory confirmation is necessary before prioritizing remediation. Treat this as an inventory and exposure-control issue unless a ZyXEL P-335WT is confirmed in use. If present, prioritize reducing UPnP exposure and finding vendor guidance, because the reported behavior can unintentionally expose internal systems. Mitigation focus: Inventory for ZyXEL P-335WT routers in production, lab, and remote-office networks.; Check ZyXEL or trusted advisory guidance for firmware fixes or retirement recommendations.; Review whether UPnP is enabled and reachable from untrusted network segments..

Prepared

Jun 29, 2026, 12:30 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.