Zyxel VMG5313-B30B shell command injection vulnerability

The Zyxel VMG5313-B30B is a router device. A security vulnerability exists in the Zyxel VMG5313-B30B, which can be exploited by remote attackers to submit a special request that can be injected with arbitrary SHELL commands and executed...

Zyxel VMG5313-B30B Elevation of Privilege Vulnerability

The Zyxel VMG5313-B30B is a router device. The Zyxel VMG5313-B30B elevation of privilege vulnerability can be exploited by a remote attacker to submit a special request that can create an elevated user with elevated privileges...

CVE-2020-24355

Zyxel VMG5313-B30B router on firmware 5.13ABCJ.6b31127, and possibly older versions of firmware are affected by insecure permissions which allows regular and other users to create new users with elevated privileges. This is done by changing "FirstIndex" field in JSON that is POST-ed during accoun...

Arbitrary file deletion

Zyxel VMG5313-B30B router on firmware 5.13ABCJ.6b31127, and possibly older versions of firmware are affected by insecure permissions which allows regular and other users to create new users with elevated privileges. This is done by changing "FirstIndex" field in JSON that is POST-ed during accoun...

CVE-2020-24355

CVE-2020-24355 affects Zyxel VMG5313-B30B routers; the vulnerability stems from insecure permissions that let an attacker create new users with elevated privileges by manipulating the FirstIndex field in the account-creation JSON (and possibly during deletion). Affected firmware includes 5.13(ABC...

PT-2020-15703

Name of the Vulnerable Software and Affected Versions Zyxel VMG5313-B30B router versions 5.13ABCJ.6b3 1127 and possibly earlier Description The issue concerns insecure permissions that allow regular and other users to create new users with elevated privileges. This is achieved by modifying the...

CVE-2020-24355: Incorrect Permission Assignment for Critical Resource

Zyxel VMG5313-B30B router on firmware 5.13ABCJ.6b31127, and possibly older versions of firmware are affected by insecure permissions which allows regular and other users to create new users with elevated privileges. This is done by changing "FirstIndex" field in JSON that is POST-ed during accoun...

CVE-2020-24354

Zyxel VMG5313-B30B router on firmware 5.13ABCJ.6b31127, and possibly older versions of firmware are affected by shell injection...

Design/Logic Flaw

Zyxel VMG5313-B30B router on firmware 5.13ABCJ.6b31127, and possibly older versions of firmware are affected by shell injection...

CVE-2020-24354

The CVE-2020-24354 entry concerns the Zyxel VMG5313-B30B router with firmware 5.13(ABCJ.6)b3_1127 and possibly older versions, which is affected by a shell-injection vulnerability. The Red Hat/EUVD/CNVD/NVD records describe a remote shell-command injection flaw that can be exploited by remote att...

CVE-2020-24354

Zyxel VMG5313-B30B router on firmware 5.13ABCJ.6b31127, and possibly older versions of firmware are affected by shell injection...

CVE-2020-24354: Improper Neutralization of Special Elements used in an OS Command

Zyxel VMG5313-B30B router on firmware 5.13ABCJ.6b31127, and possibly older versions of firmware are affected by shell injection...

PT-2020-15702

Name of the Vulnerable Software and Affected Versions Zyxel VMG5313-B30B router versions prior to 5.13ABCJ.6b3 1127 Description The issue is related to shell injection. Recommendations For versions prior to 5.13ABCJ.6b3 1127, update the firmware to a version that contains a fix for this issue...