VYPR
← All advisories
High severity7.2NVD Advisory· Published Sep 3, 2024· Updated Jun 17, 2026

CVE-2024-7203

CVE-2024-7203

Description

A post-authentication command injection vulnerability in Zyxel ATP series firmware versions from V4.60 through V5.38 and USG FLEX series firmware versions from V4.60 through V5.38 could allow an authenticated attacker with administrator privileges to execute some operating system (OS) commands on an affected device by executing a crafted CLI command.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

5
  • Zyxel/Zld
    cpe:2.3:o:zyxel:zld:*:*:*:*:*:*:*:*
    Range: >=4.60,<5.39
  • Zyxel/ATP seriesllm-fuzzy2 versions
    V4.60 - V5.38+ 1 more
    • (no CPE)range: V4.60 - V5.38
    • (no CPE)range: versions V4.60 through V5.38
  • Zyxel/USG FLEX seriesllm-fuzzy2 versions
    V4.60 - V5.38+ 1 more
    • (no CPE)range: V4.60 - V5.38
    • (no CPE)range: versions V4.60 through V5.38

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.