PT-2019-11951 · Zyxel · Zyxel Nas326
Maxwell Dulin
·
Published
2019-04-09
·
Updated
2019-04-10
·
CVE-2019-10632
CVSS v3.1
6.5
Medium
| Vector | AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N |
Name of the Vulnerable Software and Affected Versions
Zyxel NAS 326 versions 5.21 and below
Description
A directory traversal issue in the file browser component allows a lower privileged user to change the location of any other user's files.
Recommendations
For Zyxel NAS 326 versions 5.21 and below, update to a version above 5.21 to resolve the issue.
Exploit
Fix
Path traversal
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Zyxel Nas326