Lucene search

Nbg6604 Firmware Security Vulnerabilities - 2023

cve

CVE-2023-22919

The post-authentication command injection vulnerability in the Zyxel NBG6604 firmware version V1.01(ABIR.0)C0 could allow an authenticated attacker to execute some OS commands remotely by sending a crafted HTTP request.

8.8CVSS

8.7AI Score

0.001EPSS

2023-05-01 05:15 PM

cve

CVE-2023-33013

A post-authentication command injection vulnerability in the NTP feature of Zyxel NBG6604 firmware version V1.01(ABIR.1)C0 could allow an authenticated attacker to execute some OS commands remotely by sending a crafted HTTP request.

8.8CVSS

8.8AI Score

0.001EPSS

2023-08-14 05:15 PM