A buffer overflow exists in the zdp_wtp binary of Zyxel NWA110AX firmware, allowing a LAN‑based attacker to gain elevated privileges on the device. The flaw is a classic stack-based overflow (CWE‑120) that, when triggered, can overwrite return addresses and execute arbitrary code with device privileges. This attack undermines the integrity of the router’s operating system, potentially granting an attacker full control over network traffic, configuration, and sensitive data.

The vulnerability affects Zyxel NWA110AX firmware versions up through 7.12(ABTG.0)C0. Devices running these firmware releases are at risk; newer firmware revisions are presumed to contain the fix.

The CVSS score of 8.8 indicates high severity, and while an EPSS score is not available, the lack of a KEV listing suggests no widely documented exploits yet. The attack requires physical or wireless LAN access to the device, implying that a threat actor would need proximity to the local network. Nevertheless, the high score and local nature of the vulnerability make it a priority for rapid remediation.