Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

Advisory: Zyxel NAS326 firmware, NAS542 firmware — zyxel.com/global/en/support/security-advisories/zyxel-secur… Clear all filters
TI-2023-04130 CVE-2023-4474 · GHSA-h9w9-8x3q-c9vg

OS command injection in Zyxel NAS326 firmware

Priority HIGH 82

The improper neutralization of special elements in the WSGI server of the Zyxel NAS326 firmware version V5.21(AAZF.14)C0 and NAS542 firmware version V5.21(ABAG.11)C0 could allow an unauthenticated attacker to execute som…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.2974 Published 2023-11-30 No fix listed CWE-78
TI-2023-04129 CVE-2023-4473 · GHSA-2h5j-5qmh-v4qh

OS command injection in Zyxel NAS326 firmware

Priority HIGH 82

A command injection vulnerability in the web server of the Zyxel NAS326 firmware version V5.21(AAZF.14)C0 and NAS542 firmware version V5.21(ABAG.11)C0 could allow an unauthenticated attacker to execute some operating sys…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.41348 Published 2023-11-30 No fix listed CWE-78
TI-2023-19361 CVE-2023-37928 · GHSA-2gqh-f22g-jh9g

OS command injection in Zyxel NAS326 firmware

Priority HIGH 72

A post-authentication command injection vulnerability in the WSGI server of the Zyxel NAS326 firmware version V5.21(AAZF.14)C0 and NAS542 firmware version V5.21(ABAG.11)C0 could allow an authenticated attacker to execute…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.602 Published 2023-11-30 No fix listed CWE-78
TI-2023-19360 CVE-2023-37927 · GHSA-rxh8-p4v2-m8hf

OS command injection in Zyxel NAS326 firmware

Priority MEDIUM 42

The improper neutralization of special elements in the CGI program of the Zyxel NAS326 firmware version V5.21(AAZF.14)C0 and NAS542 firmware version V5.21(ABAG.11)C0 could allow an authenticated attacker to execute some…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01752 Published 2023-11-30 No fix listed CWE-78
TI-2023-17584 CVE-2023-35138 · GHSA-j6jv-pgmx-6fp3

OS command injection in Zyxel NAS326 firmware

Priority HIGH 70

A command injection vulnerability in the “show_zysync_server_contents” function of the Zyxel NAS326 firmware version V5.21(AAZF.14)C0 and NAS542 firmware version V5.21(ABAG.11)C0 could allow an unauthenticated attacker t…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.39998 Published 2023-11-30 No fix listed CWE-78
TI-2023-17583 CVE-2023-35137 · GHSA-vpqc-4qh3-4hw3

Improper authentication in Zyxel NAS326 firmware

Priority LOW 34

An improper authentication vulnerability in the authentication module of the Zyxel NAS326 firmware version V5.21(AAZF.14)C0 and NAS542 firmware version V5.21(ABAG.11)C0 could allow an unauthenticated attacker to obtain s…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00866 Published 2023-11-30 No fix listed CWE-287