Vulnerabilitycritical

Zyxel fixed critical OS command injection flaw in multiple routers

Security Affairsby @securityaffairsSep 4, 2024 · 06:27 UTC (Sep 4, 2024)2 min read3 · 1 read

Read at securityaffairs.com

Analyze CVE-2024-7261 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2024-7261 CVE-2017-18368

Tags: cve-2024-7261 cve-2017-18368 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2017-18368	Unauthenticated OS Command Injection in Zyxel/Billion TrueOnline Routers	9.8	95%	KEVPoC ×3	May 2, 2019 KEV Aug 7, 2023
CVE-2024-7261	The improper neutralization of special elements in the parameter "host" in the CGI program of Zyxel NWA1123ACv3 firmware version 6.70(ABVT.4) and earlier…	9.8	11%		Sep 3, 2024

From the original article

2 min read at securityaffairs.com

Taiwanese manufacturer Zyxel addressed a critical OS command injection flaw affecting multiple models of its business routers. Zyxel has released security updates to address a critical vulnerability, tracked as CVE-2024-7261 (CVSS v3 score of 9. 8), impacting multiple models of its business routers.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.