Critical severity9.8NVD Advisory· Published Sep 10, 2024· Updated Jun 17, 2026

CVE-2024-6342

Description

UNSUPPORTED WHEN ASSIGNED A command injection vulnerability in the export-cgi program of Zyxel NAS326 firmware versions through V5.21(AAZF.18)C0 and NAS542 firmware versions through V5.21(ABAG.15)C0 could allow an unauthenticated attacker to execute some operating system (OS) commands by sending a crafted HTTP POST request.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Zyxel/NAS326llm-fuzzy
Range: <=V5.21(AAZF.18)C0
Zyxel/NAS542llm-fuzzy
Range: <=V5.21(ABAG.15)C0
Zyxel/NAS326 firmwarev5
Range: <= V5.21(AAZF.18)C0
Zyxel/NAS542 firmwarev5
Range: <= V5.21(ABAG.15)C0

Patches

Vulnerability mechanics

References

www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-os-command-injection-vulnerability-in-nas-products-09-10-2024nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000