Skip to content
OpenAdvisories
Unscored CVE-2019-10631 EUVD-2019-2435GHSA-wx6c-ph9m-wxqg

Shell Metacharacter Injection in the package installer on Zyxel NAS 326 version 5.21 and below allows an authenticated attacker to execute …

Published Apr 9, 2019 · Updated Aug 4, 2024 · Assigned by mitre

Description

Shell Metacharacter Injection in the package installer on Zyxel NAS 326 version 5.21 and below allows an authenticated attacker to execute arbitrary code via multiple different requests.

References