Skip to content

Zyxel Nas326 vulnerabilities

zyxel nas326 firmware, nas542 firmware +1 more**UNSUPPORTED WHEN ASSIGNED** A command injection vulnerability in the export-cgi program of...CVE-2024-63429.8 CriticalSeptember 10, 2024
zyxel nas326 firmware, nas542 firmware +1 more** UNSUPPORTED WHEN ASSIGNED ** The improper privilege management vulnerability in the command ...CVE-2024-299766.5 MediumJune 4, 2024
zyxel nas326 firmware, nas542 firmware +1 more** UNSUPPORTED WHEN ASSIGNED ** The improper privilege management vulnerability in the SUID...CVE-2024-299756.7 MediumJune 4, 2024
zyxel nas326 firmware, nas542 firmware +1 more** UNSUPPORTED WHEN ASSIGNED ** The remote code execution vulnerability in the CGI program ...CVE-2024-29974EPSS 22.8%9.8 CriticalJune 4, 2024
zyxel nas326 firmware, nas542 firmware +1 more** UNSUPPORTED WHEN ASSIGNED ** The command injection vulnerability in the “setCookie” parameter...CVE-2024-29973Public exploitEPSS 86.2%9.8 CriticalJune 4, 2024
zyxel nas326 firmware, nas542 firmware +1 more** UNSUPPORTED WHEN ASSIGNED ** The command injection vulnerability in the CGI program ...CVE-2024-29972Public exploitEPSS 90.3%9.8 CriticalJune 4, 2024
zyxel nas326 firmware, nas542 firmware +1 moreThe post-authentication command injection vulnerability in Zyxel NAS326 firmware versions through...CVE-2023-5372EPSS 28.5%7.2 HighJanuary 30, 2024
zyxel nas326 firmware, nas542 firmware +1 moreThe improper neutralization of special elements in the WSGI server of the Zyxel NAS326 firmware...CVE-2023-4474EPSS 29.7%9.8 CriticalNovember 30, 2023
zyxel nas326 firmware, nas542 firmware +1 moreA command injection vulnerability in the web server of the Zyxel NAS326 firmware version V5.21...CVE-2023-4473EPSS 41.3%9.8 CriticalNovember 30, 2023
zyxel nas326 firmware, nas542 firmware +1 moreA post-authentication command injection vulnerability in the WSGI server of the Zyxel NAS326...CVE-2023-37928EPSS 60.2%8.8 HighNovember 30, 2023
zyxel nas326 firmware, nas542 firmware +1 moreThe improper neutralization of special elements in the CGI program of the Zyxel NAS326 firmware...CVE-2023-379278.8 HighNovember 30, 2023
zyxel nas326 firmware, nas542 firmware +1 moreA command injection vulnerability in the “show_zysync_server_contents” function of the Zyxel...CVE-2023-35138EPSS 40.0%9.8 CriticalNovember 30, 2023
zyxel nas326 firmware, nas542 firmware +1 moreAn improper authentication vulnerability in the authentication module of the Zyxel NAS326...CVE-2023-351377.5 HighNovember 30, 2023
zyxel nas326 firmware, nas540 firmware, multiple network-attached storage (nas) devices +1 more +3 moreThe pre-authentication command injection vulnerability in the Zyxel NAS326 firmware versions...CVE-2023-27992In KEVEPSS 82.3%9.8 CriticalJune 19, 2023
zyxel nas326 firmware, nas540 firmware, nas542 firmware +2 moreThe post-authentication command injection vulnerability in the Zyxel NAS326 firmware versions...CVE-2023-279887.2 HighMay 30, 2023
zyxel nas326 firmwareA format string vulnerability in Zyxel NAS326 firmware versions prior to V5.21(AAZF.12)C0 could...CVE-2022-347479.8 CriticalSeptember 6, 2022
zyxel nas326 firmware, nas520 firmware, nas540 firmware +1 more +3 moreCertain Zyxel products have a locally accessible binary that allows a non-root user to generate a...CVE-2020-133658.4 HighAugust 6, 2020
zyxel nas326 firmware, nas520 firmware, nas540 firmware +1 more +3 moreA backdoor in certain Zyxel products allows remote TELNET access via a CGI script. This affects...CVE-2020-133646.5 MediumAugust 6, 2020
zyxel nas326, nas520, nas540 +38 more +40 moreZyXEL NAS products running firmware version 5.21 and earlier are vulnerable to pre-authentication command injection in weblogin.cgiCVE-2020-9054In KEVPublic exploitEPSS 100.0%9.8 CriticalMarch 4, 2020
zyxel nas326 firmwareAn XSS vulnerability in the Zyxel NAS 326 version 5.21 and below allows a remote authenticated...CVE-2019-106345.4 MediumApril 9, 2019
zyxel nas326 firmwareAn eval injection vulnerability in the Python web server routing on the Zyxel NAS 326 version 5...CVE-2019-106338.8 HighApril 9, 2019
zyxel nas326 firmwareA directory traversal vulnerability in the file browser component on the Zyxel NAS 326 version 5...CVE-2019-106326.5 MediumApril 9, 2019
zyxel nas326 firmwareShell Metacharacter Injection in the package installer on Zyxel NAS 326 version 5.21 and below...CVE-2019-106318.8 HighApril 9, 2019
zyxel nas326 firmwareA plaintext password vulnerability in the Zyxel NAS 326 through 5.21 allows an elevated...CVE-2019-106308.8 HighApril 9, 2019