CVE-2017-15226

2022-10-0316:23:34

mitre

www.cve.org

zyxel nbg6716

command injection

ozkerz component

popen call

9.8 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

71.0%

JSON

Zyxel NBG6716 V1.00(AAKG.9)C0 devices allow command injection in the ozkerz component because beginIndex and endIndex are used directly in a popen call.

References

www.secarma.co.uk/labs/sohopelessly-broken-0-day-strategy/