Approved changes feed: RSS · Atom

cpe:2.3:o:zyxel:nas326_firmware:5.21\(aazf.18\)c0:-:*:*:*:*:*:*

part: o version: 5.21(aazf.18)c0 update: -

VendorZyxel (d3fcf896-5708-55f8-8f74-3e19a9d55b89)
ProductNas326 Firmware (eb6ce7a8-91d0-57d6-82c7-78c1a4a785ca)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-6342 vulnerable 2026-06-08 06:58:18.674675 Details available
CRITICAL (9.8)
**UNSUPPORTED WHEN ASSIGNED** A command injection vulnerability in the export-cgi program of Zyxel NAS326 firmware versions through V5.21(AAZF.18)C0 and NAS542 firmware versions through V5.21(ABAG.15)C0 could allow an unauthenticated attacker to execute some operating system (OS) commands by sending a crafted HTTP POST request.
Published: 2024-09-10T01:55:13.215Z
Updated: 2024-09-10T15:18:36.873Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.