CVE-2024-7261criticalCWE-78

CVE-2024-7261: falha crítica em Zyxel NWA1123ACv3 firmware

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar WAC500+ Monitorar WBE530

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

33Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 9.8epss 11%
The improper neutralization of special elements in the parameter "host" in the CGI program of Zyxel NWA1123ACv3 firmware version 6.70(ABVT.4) and earlier, WAC500 firmware version 6.70(ABVS.4) and earlier, WAX655E firmware version 7.00(ACDO.1) and earlier, WBE530 firmware version 7.00(ACLE.1) and earlier, and USG LITE 60AX firmware version V2.00(ACIP.2) could allow an unauthenticated attacker to execute OS commands by sending a crafted cookie to a vulnerable device.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
Zyxel · NWA1123ACv3 firmwareZyxel · USG LITE 60AX firmwareZyxel · WAC500 firmwareZyxel · WAX655E firmwareZyxel · WBE530 firmware
CVEs relacionadas — Zyxel NWA1123ACv3 firmware

No mesmo produto, das mais perigosas para as menos.

CVE-2022-26531MEDIUMCVE-2022-26531EPSS 6.4%CVE-2022-26532HIGHCVE-2022-26532EPSS 4.8%CVE-2023-6398HIGHCVE-2023-6398EPSS 1.3%CVE-2023-22918MEDIUMCVE-2023-22918EPSS 0.8%CVE-2023-37925MEDIUMCVE-2023-37925EPSS 0.2%CVE-2023-5797MEDIUMCVE-2023-5797EPSS 0.2%