CVE-2020-13364

A backdoor in certain Zyxel products allows remote TELNET access via a CGI script. This affects NAS520 V5.21AASZ.4C0, V5.21AASZ.0C0, V5.11AASZ.3C0, and V5.11AASZ.0C0; NAS542 V5.11ABAG.0C0, V5.20ABAG.1C0, and V5.21ABAG.3C0; NSA325 v2V4.81AALS.0C0 and V4.81AAAJ.1C0; NSA310 4.22AFK.0C0 and...

CVE-2020-13364

A backdoor in certain Zyxel products allows remote TELNET access via a CGI script. This affects NAS520 V5.21AASZ.4C0, V5.21AASZ.0C0, V5.11AASZ.3C0, and V5.11AASZ.0C0; NAS542 V5.11ABAG.0C0, V5.20ABAG.1C0, and V5.21ABAG.3C0; NSA325 v2V4.81AALS.0C0 and V4.81AAAJ.1C0; NSA310 4.22AFK.0C0 and...

CVE-2020-13364

CVE-2020-13364 describes a backdoor in certain Zyxel devices that allows remote TELNET access through a CGI script. Affected models include NAS520 (multiple firmware branches), NAS542, NSA325, NSA310, NAS326, NSA310S, NSA320S, NSA221, and NAS540 across various firmware versions listed in the entr...

PT-2020-13503

Name of the Vulnerable Software and Affected Versions Zyxel NAS520 versions V5.11AASZ.0C0 through V5.21AASZ.4C0 Zyxel NAS542 versions V5.11ABAG.0C0 through V5.21ABAG.3C0 Zyxel NSA325 versions V4.81AAAJ.1C0 and V4.81AALS.0C0 Zyxel NSA310 versions 4.22AFK.0C0 and 4.22AFK.1C0 Zyxel NAS326 versions...

PT-2020-13502

Name of the Vulnerable Software and Affected Versions Zyxel NAS520 versions V5.11AASZ.0C0 through V5.21AASZ.4C0 Zyxel NAS542 versions V5.11ABAG.0C0 through V5.21ABAG.3C0 Zyxel NSA325 versions V4.81AAAJ.1C0 and V4.81AALS.0C0 Zyxel NSA310 versions 4.22AFK.0C0 and 4.22AFK.1C0 Zyxel NAS326 versions...

CVE-2020-13365: Improper Authentication

Certain Zyxel products have a locally accessible binary that allows a non-root user to generate a password for an undocumented user account that can be used for a TELNET session as root. This affects NAS520 V5.21AASZ.4C0, V5.21AASZ.0C0, V5.11AASZ.3C0, and V5.11AASZ.0C0; NAS542 V5.11ABAG.0C0,...

Zyxel NSA310 RCE Vulnerability

A remote unauthenticated code execution vulnerability in Zyxel NSA310 allows remote attackers to execute arbitrary code as a root SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Zyxel NSA310远程命令执行漏洞

漏洞效果 打印/etc/passwd 演示在存在漏洞主机上注入系统命令打印/etc/passwd： $ telnet 192.168.219.101 21 Trying 192.168.219.101... Connected to 192.168.219.101. Escape character is '^'. 220­­­­­­­­­­ Welcome to Pure­FTPd TLS ­­­­­­­­­­ 220­ You are user number 1 of 10 allowed. 220 ­Local time is now 22:46. Server port: 21...