中文

// CVE · PUBLISHED 2024-06-04

CVE-2024-29972

Zyxel / NAS326 firmware · Zyxel / NAS542 firmware · zyxel / nas326_firmware · +1

9.8 · CVSS 3.1Critical

Description

** UNSUPPORTED WHEN ASSIGNED ** The command injection vulnerability in the CGI program "remote_help-cgi" in Zyxel NAS326 firmware versions before V5.21(AAZF.17)C0 and NAS542 firmware versions before V5.21(ABAG.14)C0 could allow an unauthenticated attacker to execute some operating system (OS) commands by sending a crafted HTTP POST request.

References

Related CVEs

← CVE Index: search every CVE from the last 30 days

This product uses the NVD API but is not endorsed or certified by the NVD. CVSS scores do not establish exploitation.