CVE-2024-29973

🗓️ 04 Jun 2024 01:29:41Reported by ZyxelType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 156 Views🌐 WEB

CVE-2024-29973 NVD

Reporter	Title	Published	Views	Family All 19
GithubExploit	Exploit for OS Command Injection in Zyxel Nas326_Firmware	19 Jun 202410:34	–	githubexploit
GithubExploit	Exploit for OS Command Injection in Zyxel Nas326_Firmware	10 Oct 202423:48	–	githubexploit
GithubExploit	Exploit for OS Command Injection in Zyxel Nas326_Firmware	19 Jun 202409:28	–	githubexploit
GithubExploit	Exploit for OS Command Injection in Zyxel Nas326_Firmware	21 Jun 202406:38	–	githubexploit
GithubExploit	Exploit for OS Command Injection in Zyxel Nas326_Firmware	21 Jun 202415:20	–	githubexploit
GithubExploit	Exploit for OS Command Injection in Zyxel Nas326_Firmware	20 Jun 202401:52	–	githubexploit
BDU FSTEC	The vulnerability of the microprogrammed software for Zyxel NAS326 and Zyxel NAS542 lies in the lack of measures taken to neutralize special elements used in the operating system’s command set. This allows attackers to execute arbitrary commands.	14 Jun 202400:00	–	bdu_fstec
Circl	CVE-2024-29973	5 Jun 202417:33	–	circl
Cvelist	CVE-2024-29973	4 Jun 202401:29	–	cvelist
Nuclei	Zyxel NAS326 Firmware < V5.21(AAZF.17)C0 - Command Injection	23 Jul 202603:49	–	nuclei

NVD

Node

AND

zyxel nas326_firmwareRange<5.21(aazf.17)c0

zyxel nas326Match-

Node

AND

zyxel nas542_firmwareRange<5.21(abag.14)c0

zyxel nas542Match-

[
  {
    "defaultStatus": "unaffected",
    "product": "NAS326 firmware",
    "vendor": "Zyxel",
    "versions": [
      {
        "status": "affected",
        "version": "< V5.21(AAZF.17)C0"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "NAS542 firmware",
    "vendor": "Zyxel",
    "versions": [
      {
        "status": "affected",
        "version": "< V5.21(ABAG.14)C0"
      }
    ]
  }
]

Source	Link
zyxel	www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-multiple-vulnerabilities-in-nas-products-06-04-2024
outpost24	www.outpost24.com/blog/zyxel-nas-critical-vulnerabilities/