Lucene search

K
nessusThis script is Copyright (C) 2022-2024 and is owned by Tenable, Inc. or an Affiliate thereof.ZYXEL_CVE-2022-30525.NBIN
HistoryJan 11, 2023 - 12:00 a.m.

Zyxel Command Injection (CVE-2022-30525) (Direct Check)

2023-01-1100:00:00
This script is Copyright (C) 2022-2024 and is owned by Tenable, Inc. or an Affiliate thereof.
www.tenable.com
25

The remote host is a Zyxel device that is affected by a remote command injection vulnerability due to improper validation of user input. A remote, unauthenticated attacker can exploit this issue, via a specially crafted HTTP request, to execute commands as the ‘nobody’ user on the remote host.

Binary data zyxel_CVE-2022-30525.nbin
VendorProductVersionCPE
zyxelusg_flexcpe:/h:zyxel:usg_flex
zyxelusgx-cpe:/h:zyxel:usg