Security Advisory

CVE-2024-12010

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-03-11 01:44:15

Last updated 2026-02-26 19:09:42

Assigner Zyxel

State PUBLISHED

Description

A post-authentication command injection vulnerability in the ”zyUtilMailSend” function of the Zyxel AX7501-B1 firmware version V5.17(ABPC.5.3)C0 and earlier could allow an authenticated attacker with administrator privileges to execute operating system (OS) commands on a vulnerable device.

← Browse all CVEs View on cve.org ↗