PT-2024-3976 · Zyxel · Zyxel Nas542+1

Timothy Hjort

·

CVE-2024-29972

·

Published

2024-06-03

·

Updated

2025-01-22

CVSS v2.0

10

Critical

VectorAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Zyxel NAS326 versions prior to V5.21(AAZF.17)C0 Zyxel NAS542 versions prior to V5.21(ABAG.14)C0
Description The issue exists due to the lack of measures to neutralize special elements used in the operating system command. Exploitation of this issue may allow a remote attacker to execute arbitrary code by sending a specially crafted HTTP POST request to the remote help-cgi CGI program. This allows an unauthenticated attacker to execute some operating system (OS) commands.
Recommendations For Zyxel NAS326 versions prior to V5.21(AAZF.17)C0, update to V5.21(AAZF.17)C0 or later. For Zyxel NAS542 versions prior to V5.21(ABAG.14)C0, update to V5.21(ABAG.14)C0 or later. As a temporary workaround, consider restricting access to the remote help-cgi CGI program until a patch is available.

Exploit

Fix

OS Command Injection

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-78

Related Identifiers

BDU:2024-04391
CVE-2024-29972

Affected Products

Zyxel Nas326
Zyxel Nas542