2 matches found
CVE-2023-35138
A command injection vulnerability in the “showzysyncservercontents” function of the Zyxel NAS326 firmware version V5.21AAZF.14C0 and NAS542 firmware version V5.21ABAG.11C0 could allow an unauthenticated attacker to execute some operating system OS commands by sending a crafted HTTP POST request...
9.8CVSS5.9AI score0.39998EPSS
SaveExploits0References1
CVE-2023-35138: Improper Neutralization of Special Elements used in an OS Command
A command injection vulnerability in the “showzysyncservercontents” function of the Zyxel NAS326 firmware version V5.21AAZF.14C0 and NAS542 firmware version V5.21ABAG.11C0 could allow an unauthenticated attacker to execute some operating system OS commands by sending a crafted HTTP POST request...
9.8CVSS8.5AI score0.39998EPSS
SaveExploits0References3
20