CVE-2023-5372

creationtimestamp| type| source ---|---|--- 2024-01-30 02:31:14+00:00| seen| https://t.me/ctinow/175657...

CVE-2023-5372

The post-authentication command injection vulnerability in Zyxel NAS326 firmware versions through V5.21AAZF.15C0 and NAS542 firmware versions through V5.21ABAG.12C0 could allow an authenticated attacker with administrator privileges to execute some operating system OS commands by sending a crafte...

CVE-2023-5372

The CVE-2023-5372 issue affects Zyxel NAS326 and NAS542. It is a post-authentication command injection in the web management interface that allows an authenticated administrator to execute OS commands by sending a crafted query parameter in the affected URL. Affected firmware: NAS326 up to V5.21(...