CVE-2023-27988

The post-authentication command injection vulnerability in the Zyxel NAS326 firmware versions prior to V5.21AAZF.13C0 could allow an authenticated attacker with administrator privileges to execute some operating system OS commands on an affected device remotely...

CVE-2023-27988

CVE-2023-27988 affects Zyxel NAS326 firmware versions prior to V5.21(AAZF.13)C0. A post-authentication command injection allows an authenticated administrator to remotely execute OS commands on the device. The issue has high impact (CVSS v3.1: 7.2). Mitigation: upgrade to V5.21(AAZF.13)C0 or newe...