Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Advisory: Zyxel NAS326 firmware, NAS542 firmware — zyxel.com/global/en/support/security-advisories/zyxel-secur… Clear all filters
TI-2024-19739 CVE-2024-29976 · GHSA-f5mr-vq5h-37xc

Improper privilege management in Zyxel NAS326 firmware

Priority MEDIUM 42

** UNSUPPORTED WHEN ASSIGNED ** The improper privilege management vulnerability in the command “show_allsessions” in Zyxel NAS326 firmware versions before V5.21(AAZF.17)C0 and NAS542 firmware versions before V5.21(ABAG.1…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.08954 Published 2024-06-04 Fixed in V5.21(AAZF.17)C0, V5.21(ABAG.14)C0 CWE-269
TI-2024-19738 CVE-2024-29975 · GHSA-2h22-6qr3-qgp2

Improper privilege management in Zyxel NAS326 firmware

Priority LOW 38

** UNSUPPORTED WHEN ASSIGNED ** The improper privilege management vulnerability in the SUID executable binary in Zyxel NAS326 firmware versions before V5.21(AAZF.17)C0 and NAS542 firmware versions before V5.21(ABAG.14)C0…

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00466 Published 2024-06-04 Fixed in V5.21(AAZF.17)C0, V5.21(ABAG.14)C0 CWE-269
TI-2024-19737 CVE-2024-29974 · GHSA-f3hm-gpcm-pwvf

Unrestricted file upload in Zyxel NAS326 firmware

Priority HIGH 69

** UNSUPPORTED WHEN ASSIGNED ** The remote code execution vulnerability in the CGI program “file_upload-cgi” in Zyxel NAS326 firmware versions before V5.21(AAZF.17)C0 and NAS542 firmware versions before V5.21(ABAG.14)C0…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.22784 Published 2024-06-04 Fixed in V5.21(AAZF.17)C0, V5.21(ABAG.14)C0 CWE-434
TI-2024-19736 CVE-2024-29973 · GHSA-2w49-w2vv-p84h

OS command injection in Zyxel NAS326 firmware

Priority CRITICAL 91

** UNSUPPORTED WHEN ASSIGNED ** The command injection vulnerability in the “setCookie” parameter in Zyxel NAS326 firmware versions before V5.21(AAZF.17)C0 and NAS542 firmware versions before V5.21(ABAG.14)C0 could allow…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.86205 Published 2024-06-04 Fixed in V5.21(AAZF.17)C0, V5.21(ABAG.14)C0 CWE-78
TI-2024-19735 CVE-2024-29972 · GHSA-9c67-m3v4-35rv

OS command injection in Zyxel NAS326 firmware

Priority CRITICAL 92

** UNSUPPORTED WHEN ASSIGNED ** The command injection vulnerability in the CGI program "remote_help-cgi" in Zyxel NAS326 firmware versions before V5.21(AAZF.17)C0 and NAS542 firmware versions before V5.21(ABAG.14)C0 coul…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.90349 Published 2024-06-04 Fixed in V5.21(AAZF.17)C0, V5.21(ABAG.14)C0 CWE-78