Unrated severityNVD Advisory· Published Aug 30, 2024· Updated Aug 30, 2024

CVE-2024-8234

Description

UNSUPPORTED WHEN ASSIGNED A command injection vulnerability in the functions formSysCmd(), formUpgradeCert(), and formDelcert() in the Zyxel NWA1100-N firmware version 1.00(AACE.1)C0 could allow an unauthenticated attacker to execute some OS commands to access system files on an affected device.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Zyxel/NWA1100-Nllm-fuzzy
Range: = 1.00(AACE.1)C0
Zyxel/Nwa3560 N Firmwarecpe-rescue
Range: 1.00(AACE.1)C0

Patches

Vulnerability mechanics

References

github.com/GroundCTL2MajorTom/pocs/blob/main/zyxel_NWAW1100-N_rce.mdmitre
webservice.zyxel.com/eol/ArchivedEOLModel.pdfmitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.004
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000