Zyxel NAS Multiple Vulnerabilities (Jun 2024) - Active Check

Multiple Zyxel NAS devices are prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only e.g.:...

CVE-2024-29975

CVE-2024-29975 relates to Zyxel NAS326 and NAS542 devices where an improper privilege management in the SUID executable binary could allow an authenticated local admin to run commands as root. Affected: NAS326 before V5.21(AAZF.17)C0 and NAS542 before V5.21(ABAG.14)C0. Impact is elevated privileg...

CVE-2024-29975

UNSUPPORTED WHEN ASSIGNED The improper privilege management vulnerability in the SUID executable binary in Zyxel NAS326 firmware versions before V5.21AAZF.17C0 and NAS542 firmware versions before V5.21ABAG.14C0 could allow an authenticated local attacker with administrator privileges to execute...