Command injection

2023-05-0117:15:00

PRIOn knowledge base

www.prio-n.com

post-authentication

vulnerability

zyxel nbg6604

firmware

command injection

remote execution

authenticated attacker

http request

8.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

34.4%

JSON

The post-authentication command injection vulnerability in the Zyxel NBG6604 firmware version V1.01(ABIR.0)C0 could allow an authenticated attacker to execute some OS commands remotely by sending a crafted HTTP request.

CPENameOperatorVersion
nbg6604_firmwareeq1.1.0-abir.0-c0

CPE	Name	Operator	Version
	nbg6604_firmware	eq	1.1.0-abir.0-c0

References

www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-post-authentication-command-injection-vulnerability-in-nbg6604-home-router