Unrated severityNVD Advisory· Published Nov 30, 2023· Updated Aug 2, 2024

CVE-2023-35138

Description

A command injection vulnerability in the “show_zysync_server_contents” function of the Zyxel NAS326 firmware version V5.21(AAZF.14)C0 and NAS542 firmware version V5.21(ABAG.11)C0 could allow an unauthenticated attacker to execute some operating system (OS) commands by sending a crafted HTTP POST request.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Zyxel/NAS326llm-fuzzy
Range: = V5.21(AAZF.14)C0
Zyxel/NAS542llm-fuzzy
Range: = V5.21(ABAG.11)C0
Zyxel/NAS326 firmwarev5
Range: V5.21(AAZF.14)C0
Zyxel/NAS542 firmwarev5
Range: V5.21(ABAG.11)C0

Patches

Vulnerability mechanics

References

www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-authentication-bypass-and-command-injection-vulnerabilities-in-nas-productsmitrevendor-advisory

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.032
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000