Kritik CVSS 9.8 PoC var
CVE-2024-29972: Nas326 Firmware: işletim sistemi komut enjeksiyonu
Açıklama (NVD)
** UNSUPPORTED WHEN ASSIGNED ** The command injection vulnerability in the CGI program "remote_help-cgi" in Zyxel NAS326 firmware versions before V5.21(AAZF.17)C0 and NAS542 firmware versions before V5.21(ABAG.14)C0 could allow an unauthenticated attacker to execute some operating system (OS) commands by sending a crafted HTTP POST request.
Özet bilgiler
- Ürün
- Zyxel Nas326 Firmware
- CVSS v3.1
- 9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - EPSS
- %90,35 (yüzdelik 100)
- CWE
- CWE-78
- Yama
- Yok / bilinmiyor
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| zyxel-nas326-firmware | — | — | 5.21\(aazf.17\)c0 |
| zyxel-nas542-firmware | — | — | 5.21\(abag.14\)c0 |