Router

ZyXEL NBG6716

Projects for this device

Replacement firmware

OpenWrt

Replace router software with a customizable system for network controls and community packages.

How to get started

Follow the guide for your exact router version. The first installation may use its web interface, recovery mode or a serial connection.

Setup: Firmware replacement; route varies by router
You’ll need: Exact hardware revision, an appropriate OpenWrt release and its model-specific installation guide.

A01: Get OpenWrt firmware Release listed · 25.12.6
A01; rev A01: Open hardware record
Hardware revision not specified: Open hardware record Release listed · 25.12.5

Original project github.com

Recorded configuration: 16/256NAND MB flash; 256 MB RAM

First installation: CLI generic; U-Boot TFTP + serial recovery

Sources

Features & details

Check the project and hardware shown for each feature.

Device details

zyxel nbg6716 a01 — device documentation (github.com)Device details — Source documentation (openwrt.org)

Hardware revision: A01

Device details

ZyXEL NBG6716 — TechInfoDepot (github.com)

Hardware revision: rev A01

OpenWrt · A01

OpenWrt · A01 — Source documentation (openwrt.org)

Installation routes recorded: CLI generic, U-Boot TFTP + serial recovery
Recovery routes recorded: U-Boot TFTP + serial recovery
Availability recorded by source: Discontinued 2016

Hardware details

Documented hardware

zyxel nbg6716 a01 — device documentation (github.com)ZyXEL NBG6716 — TechInfoDepot (github.com)Documented hardware — Source documentation (openwrt.org)

Processor: Qualcomm Atheros QCA9558
Hardware revision: A01
Hardware revision: rev A01
Wi-Fi chip: Qualcomm Atheros QCA9880
Flash: 16 MB
Processor / Wi-Fi: Qualcomm Atheros QCA9558
Memory: 256 MB
Hardware revision: A01

Technical references

ZyXEL NBG6716 — WikiDevi hardware record (github.com) ↗

Security

Saved scan 18 Oct 2026

From our saved security research.

Model advisories

Selected highlights

Prioritized by known exploitation, severity, then date.

CVE published 10 Oct 2017

ZyXEL NBG6716

Zyxel NBG6716 V1.00(AAKG.9)C0 devices allow command injection in the ozkerz component because beginIndex and endIndex are used directly in a popen call.

CVE-2017-15226

Affected firmware: NBG6716: V1.00(AAKG.9)C0
Fix: Fix details in the linked record

Read mitre CVE record

Details and sources

CVE updated 17 Sept 2024

Zyxel NBG6716 V1.00(AAKG.9)C0 devices allow command injection in the ozkerz component because beginIndex and endIndex are used directly in a popen call.

Check more security advisories for this device · CVE.org