The diagnostic-ping implementation on ZyXEL PMG5318-B20A devices with firmware before 1.00(AANC.2)C0 allows remote attackers to execute arbitrary commands via the PingIPAddr parameter.
oryginał ENCVSS Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HZyxel Pmg5318 B20a Firmware
OSZyxel≤ v100aanc0b5
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
CWE
Powiązane podatności
CVE-2015-6016CRITICAL9.8ten sam produkt
ZyXEL P-660HW-T1 2 devices with ZyNOS firmware 3.40(AXH.0), PMG5318-B20A devices with firmware 1.00AANC0b5, an...
CVE-2015-6019HIGH8.5ten sam produkt
The management portal on ZyXEL PMG5318-B20A devices with firmware 1.00AANC0b5 does not terminate sessions upon...
CVE-2015-6020HIGH8.0ten sam produkt
ZyXEL PMG5318-B20A devices with firmware 1.00AANC0b5 allow remote authenticated users to obtain administrative...
CVE-2015-7256MEDIUM5.9ten sam produkt
ZyXEL NWA1100-N, NWA1100-NH, NWA1121-NI, NWA1123-AC, and NWA1123-NI access points; P-660HN-51, P-663HN-51, VMG...
CVE-2023-27992CRITICAL9.8⚠ KEVten sam vendor
The pre-authentication command injection vulnerability in the Zyxel NAS326 firmware versions prior to V5.21(AA...