Exploit for OS Command Injection in Zyxel Nas326_Firmware

🗓️ 19 Jun 2024 10:34:56Reported by bigb0xType

Proof of concept and bulk scanner for Zyxel NAS326 and NAS542 firmware versions before V5.21(AAZF.17)C0 and V5.21(ABAG.14). Contains single and bulk target scan options. Requires Python 3.6+ and 'requests' library. Created by M Ali for CVE-2024-29973.

Reporter	Title	Published	Views	Family All 19
GithubExploit	Exploit for OS Command Injection in Zyxel Nas326_Firmware	10 Oct 202423:48	–	githubexploit
GithubExploit	Exploit for OS Command Injection in Zyxel Nas326_Firmware	19 Jun 202409:28	–	githubexploit
GithubExploit	Exploit for OS Command Injection in Zyxel Nas326_Firmware	21 Jun 202406:38	–	githubexploit
GithubExploit	Exploit for OS Command Injection in Zyxel Nas326_Firmware	21 Jun 202415:20	–	githubexploit
GithubExploit	Exploit for OS Command Injection in Zyxel Nas326_Firmware	20 Jun 202401:52	–	githubexploit
BDU FSTEC	The vulnerability of the microprogrammed software for Zyxel NAS326 and Zyxel NAS542 lies in the lack of measures taken to neutralize special elements used in the operating system’s command set. This allows attackers to execute arbitrary commands.	14 Jun 202400:00	–	bdu_fstec
Circl	CVE-2024-29973	5 Jun 202417:33	–	circl
CVE	CVE-2024-29973	4 Jun 202401:29	–	cve
Cvelist	CVE-2024-29973	4 Jun 202401:29	–	cvelist
Nuclei	Zyxel NAS326 Firmware < V5.21(AAZF.17)C0 - Command Injection	16 Jun 202607:13	–	nuclei