A command injection vulnerability in the web server of the Zyxel NAS326 firmware version V5.21(AAZF.14)C0 and NAS542 firmware version V5.21(ABAG.11)C0 could allow an unauthenticated attacker to execute some operating system (OS) commands by sending a crafted URL to a vulnerable device.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: Zyxel

Published: 2023-11-30T01:40:09.117Z

Updated: 2024-08-02T07:31:05.492Z

Reserved: 2023-08-22T06:51:30.982Z

Link: CVE-2023-4473

cve-icon Vulnrichment

Updated: 2024-08-02T07:31:05.492Z

cve-icon NVD

Status : Modified

Published: 2023-11-30T02:15:43.347

Modified: 2024-11-21T08:35:14.490

Link: CVE-2023-4473

cve-icon Redhat

No data.