VYPR
← All advisories
Unrated severityNVD Advisory· Published Apr 11, 2022· Updated Aug 3, 2024

CVE-2022-26413

CVE-2022-26413

Description

A command injection vulnerability in the CGI program of Zyxel VMG3312-T20A firmware version 5.30(ABFX.5)C0 could allow a local authenticated attacker to execute arbitrary OS commands on a vulnerable device via a LAN interface.

Affected products

2
  • Zyxel/VMG3312-T20Allm-create
    Range: =5.30(ABFX.5)C0
  • Zyxel/VMG3312-T20A firmwarev5
    Range: V5.30(ABFX.5)C0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.