PT-2024-6139 · Zyxel · Wax655E+4

Chengchao Ai · Published 2024-09-02 · Updated 2024-09-14 · CVE-2024-7261

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Zyxel NWA1123ACv3 versions 6.70(ABVT.4) and earlier Zyxel WAC500 versions 6.70(ABVS.4) and earlier Zyxel WAX655E versions 7.00(ACDO.1) and earlier Zyxel WBE530 versions 7.00(ACLE.1) and earlier Zyxel USG LITE 60AX version V2.00(ACIP.2)

Description The vulnerability exists due to the improper neutralization of special elements in the host parameter in the CGI program, allowing an unauthenticated attacker to execute OS commands by sending a crafted cookie to a vulnerable device. This issue can be exploited remotely and may allow attackers to execute arbitrary commands on the host operating system.

Recommendations For Zyxel NWA1123ACv3 versions 6.70(ABVT.4) and earlier, update to the latest firmware version. For Zyxel WAC500 versions 6.70(ABVS.4) and earlier, update to the latest firmware version. For Zyxel WAX655E versions 7.00(ACDO.1) and earlier, update to the latest firmware version. For Zyxel WBE530 versions 7.00(ACLE.1) and earlier, update to the latest firmware version. For Zyxel USG LITE 60AX version V2.00(ACIP.2), update to the latest firmware version. As a temporary workaround, consider restricting access to the vulnerable CGI program until a patch is available.

Fix

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

BDU:2024-07058

CVE-2024-7261

Affected Products

Nwa1123Acv3

Usg Lite 60Ax

Wac500

Wax655E

Wbe530

References · 58

• https://zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-os-command-injection-vulnerability-in-aps-and-security-router-devices-09-03-2024 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-07058 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-7261 · Security Note
• https://osv.dev/vulnerability/CVE-2024-7261 · Vendor Advisory
• https://twitter.com/DonMalloy/status/1830988271813357620 · Twitter Post
• https://twitter.com/1stScamSector/status/1830957498326823395 · Twitter Post
• https://t.me/pentestingnews/51058 · Telegram Post
• https://twitter.com/jvquantum/status/1831294089981055219 · Twitter Post
• https://twitter.com/CveFindCom/status/1830795624754663598 · Twitter Post
• https://twitter.com/ChannelSkell/status/1834253455596093740 · Twitter Post
• https://twitter.com/threatbytefeed/status/1830868746568675662 · Twitter Post
• https://twitter.com/hedgehogsec/status/1833037669284163945 · Twitter Post
• https://twitter.com/transilienceai/status/1834917242766532700 · Twitter Post
• https://twitter.com/XynikIT/status/1831062920299532667 · Twitter Post
• https://t.me/latest_high_impact_cve/1095 · Telegram Post