The vulnerability of the microprogrammed software for Zyxel NAS326, NAS540, and NAS542 lies in the lack of measures taken to neutralize special elements used in the operating system’s command set. This allows attackers to execute arbitrary code.

The vulnerability of the microprogrammed software for Zyxel NAS326, NAS540, and NAS542 lies in the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a specially...

PT-2023-3171 · Zyxel · Zyxel Nas326 +2

Name of the Vulnerable Software and Affected Versions: Zyxel NAS326 versions prior to V5.21AAZF.14C0 Zyxel NAS540 versions prior to V5.21AATB.11C0 Zyxel NAS542 versions prior to V5.21ABAG.11C0 Description: The pre-authentication command injection issue in Zyxel NAS devices could allow an...

CVE-2023-27992: Improper Neutralization of Special Elements used in an OS Command

The pre-authentication command injection vulnerability in the Zyxel NAS326 firmware versions prior to V5.21AAZF.14C0, NAS540 firmware versions prior to V5.21AATB.11C0, and NAS542 firmware versions prior to V5.21ABAG.11C0 could allow an unauthenticated attacker to execute some operating system OS...

CVE-2023-27992

The pre-authentication command injection vulnerability in the Zyxel NAS326 firmware versions prior to V5.21AAZF.14C0, NAS540 firmware versions prior to V5.21AATB.11C0, and NAS542 firmware versions prior to V5.21ABAG.11C0 could allow an unauthenticated attacker to execute some operating system OS...

PT-2023-4004

Name of the Vulnerable Software and Affected Versions Zyxel NAS326 versions prior to V5.21AAZF.13C0 Zyxel NAS540 affected versions not specified Zyxel NAS542 affected versions not specified Description The issue is related to a command injection vulnerability. It may allow a remote attacker with...

PT-2020-13503

Name of the Vulnerable Software and Affected Versions Zyxel NAS520 versions V5.11AASZ.0C0 through V5.21AASZ.4C0 Zyxel NAS542 versions V5.11ABAG.0C0 through V5.21ABAG.3C0 Zyxel NSA325 versions V4.81AAAJ.1C0 and V4.81AALS.0C0 Zyxel NSA310 versions 4.22AFK.0C0 and 4.22AFK.1C0 Zyxel NAS326 versions...

PT-2020-13502

Name of the Vulnerable Software and Affected Versions Zyxel NAS520 versions V5.11AASZ.0C0 through V5.21AASZ.4C0 Zyxel NAS542 versions V5.11ABAG.0C0 through V5.21ABAG.3C0 Zyxel NSA325 versions V4.81AAAJ.1C0 and V4.81AALS.0C0 Zyxel NSA310 versions 4.22AFK.0C0 and 4.22AFK.1C0 Zyxel NAS326 versions...

CVE-2020-9054

Multiple ZyXEL network-attached storage NAS devices running firmware version 5.21 contain a pre-authentication command injection vulnerability, which may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable device. ZyXEL NAS devices achieve authentication by using th...