Security Advisory

CVE-2024-6342

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2024-09-10 01:55:13

Last updated 2024-09-10 15:18:36

Assigner Zyxel

State PUBLISHED

Description

**UNSUPPORTED WHEN ASSIGNED** A command injection vulnerability in the export-cgi program of Zyxel NAS326 firmware versions through V5.21(AAZF.18)C0 and NAS542 firmware versions through V5.21(ABAG.15)C0 could allow an unauthenticated attacker to execute some operating system (OS) commands by sending a crafted HTTP POST request.

← Browse all CVEs View on cve.org ↗