Lucene search

CVE-2024-29972

🗓️ 04 Jun 2024 02:47:15Reported by ZyxelType

cve🔗 web.nvd.nist.gov👁 63 Views🌐 WEB

CVE-2024-29972 NVD security document

Reporter	Title	Published	Views	Family All 9
GithubExploit	Exploit for OS Command Injection in Zyxel Nas326 Firmware	20 Jun 202411:12	–	githubexploit
GithubExploit	Exploit for OS Command Injection in Zyxel Nas326 Firmware	4 Jul 202421:31	–	githubexploit
Cvelist	CVE-2024-29972	4 Jun 202401:24	–	cvelist
NVD	CVE-2024-29972	4 Jun 202402:15	–	nvd
Vulnrichment	CVE-2024-29972	4 Jun 202401:24	–	vulnrichment
Nuclei	Zyxel NAS326 Firmware < V5.21(AAZF.17)C0 - NsaRescueAngel Backdoor Account	1 Jul 202401:42	–	nuclei
Tenable Nessus	Zyxel NAS Multiple Vulnerabilities	14 Jun 202400:00	–	nessus
OpenVAS	Zyxel NAS Multiple Vulnerabilities (Jun 2024) - Active Check	6 Jun 202400:00	–	openvas
The Hacker News	Zyxel Releases Patches for Firmware Vulnerabilities in EoL NAS Models	5 Jun 202407:10	–	thn

Nvd

Node

zyxel nas326_firmwareRange<5.21\(aazf.17\)c0

AND

zyxel nas326Match-

Node

zyxel nas542_firmwareRange<5.21\(abag.14\)c0

AND

zyxel nas542Match-

[
  {
    "defaultStatus": "unaffected",
    "product": "NAS326 firmware",
    "vendor": "Zyxel",
    "versions": [
      {
        "status": "affected",
        "version": "< V5.21(AAZF.17)C0"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "NAS542 firmware",
    "vendor": "Zyxel",
    "versions": [
      {
        "status": "affected",
        "version": "< V5.21(ABAG.14)C0"
      }
    ]
  }
]

Source	Link
outpost24	www.outpost24.com/blog/zyxel-nas-critical-vulnerabilities/
zyxel	www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-multiple-vulnerabilities-in-nas-products-06-04-2024

Parameter	Position	Path	Description	CWE
command	request body	/remote_help-cgi	Command injection vulnerability in CGI program allowing OS command execution via crafted HTTP POST request.	CWE-78

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

04 Jun 2024 02:15Current

8.3High risk

Vulners AI Score8.3

CVSS39.8

EPSS0.0178

SSVC

CWE-78