Vulnerability details
CVE-2024-9200
Zyxel VMG4005-B50A firmwareZyxel VMG4005-B50B firmwareZyxel emg6726-b10a_firmwareZyxel vmg3927-b50b_firmwareZyxel vmg4005-b60a_firmwareZyxel vmg4927-b50a_firmware
CVSS 3.1
7.2High
Official description
A post-authentication command injection vulnerability in the "host" parameter of the diagnostic function in Zyxel VMG4005-B50A firmware versions through V5.15(ABQA.2.2)C0 could allow an authenticated attacker with administrator privileges to execute operating system (OS) commands on a vulnerable device.
CVSS scores
| Score | Version | Source | Vector |
|---|---|---|---|
| 7.2High | 3.1 | CVEProject cvelistV5 (CNA) (Zyxel) | CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H |
Affected products
| Vendor | Product | Versions | Source |
|---|---|---|---|
| Zyxel | VMG4005-B50A firmware | v ≤ 5.15\(abqa.2.2\)c0 | CISA ADP / Vulnrichment |
| Zyxel | VMG4005-B50A firmware | <= V5.15(ABQA.2.2)C0 | CVEProject cvelistV5 (CNA) |
| Zyxel | VMG4005-B50B firmware | v ≤ 5.13\(abrl.5.1\)c0 | CISA ADP / Vulnrichment |
| Zyxel | emg6726-b10a_firmware | v ≤ 5.13\(abnp.8\)c0 | CISA ADP / Vulnrichment |
| Zyxel | vmg3927-b50b_firmware | v ≤ 5.13\(ably.9\)c0 | CISA ADP / Vulnrichment |
| Zyxel | vmg4005-b60a_firmware | v ≤ 5.15\(abqa.2.2\)c0 | CISA ADP / Vulnrichment |
| Zyxel | vmg4927-b50a_firmware | v ≤ 5.13\(ably.9\)c0 | CISA ADP / Vulnrichment |
References and advisories
1
Kolun on Telegram @kolunsec
Exploited CVEs, key news and a daily digest
Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.
Details
- Published
- 2024-12-03
- Last updated
- 2024-12-06
- State
- Published
- Assigner (CNA)
- Zyxel
Exploit prediction (EPSS)
1.16%
Probability of exploitation in 30 days
67.4%
Percentile (among all CVEs)
SSVC assessment (CISA)
- Automatable
- No
- Exploitation
- None
- Technical impact
- Total
Weaknesses (CWE)
- CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')