CVE-2021-4039

🗓️ 01 Mar 2022 06:40:09Reported by ZyxelType

cve🔗 web.nvd.nist.gov👁 222 Views🌐 WEB

Command injection vulnerability in Zyxel NWA-1100-NH firmware

Reporter	Title	Published	Views	Family All 12
0day.today	Zyxel NWA-1100-NH - Command Injection Vulnerability	19 Apr 202200:00	–	zdt
ATTACKERKB	CVE-2021-4039	1 Mar 202200:00	–	attackerkb
Circl	CVE-2021-4039	1 Mar 202212:24	–	circl
CNNVD	Zyxel Nwa-1100-Nh 操作系统命令注入漏洞	1 Mar 202200:00	–	cnnvd
Cvelist	CVE-2021-4039	1 Mar 202206:40	–	cvelist
Exploit DB	Zyxel NWA-1100-NH - Command Injection	19 Apr 202200:00	–	exploitdb
NVD	CVE-2021-4039	1 Mar 202207:15	–	nvd
Packet Storm	Zyxel NWA-1100-NH Command Injection	18 Apr 202200:00	–	packetstorm
Prion	Command injection	1 Mar 202207:15	–	prion
RedhatCVE	CVE-2021-4039	6 Feb 202504:23	–	redhatcve

NVD

Node

zyxel nwa1100-nh_firmwareRange<2.12(aasi.3)c0

AND

zyxel nwa1100-nhMatch-

[
  {
    "product": "NWA1100-NH firmware",
    "vendor": "Zyxel",
    "versions": [
      {
        "status": "affected",
        "version": "2.12(AASI.0)C0"
      }
    ]
  }
]

Source	Link
zyxel	www.zyxel.com/support/OS-command-injection-vulnerability-of-NWA1100-NH-access-point.shtml
packetstormsecurity	www.packetstormsecurity.com/files/166752/Zyxel-NWA-1100-NH-Command-Injection.html

Parameter	Position	Path	Description	CWE
myname	request body	login/login.html	Web login form vulnerable to OS command injection via crafted input in the login POST data	CWE-78
mypasswd	request body	login/login.html	Web login form vulnerable to OS command injection via crafted input in the login POST data	CWE-78

21 Nov 2024 06:36Current

9.8High risk

Vulners AI Score9.8

CVSS 3.19.8

CVSS 210

EPSS0.71705