Critical · 9.8 CVE-2022-34747 EUVD-2022-37696GHSA-p6gf-558m-r8q3

A format string vulnerability in Zyxel NAS326 firmware versions prior to V5.21(AAZF.12)C0 could allow an attacker to achieve unauthorized r…

Published Sep 6, 2022 · Updated Aug 3, 2024 · Assigned by Zyxel

Vendor: Zyxel Product: Zyxel NAS326 firmware Category: Network devices

Description

A format string vulnerability in Zyxel NAS326 firmware versions prior to V5.21(AAZF.12)C0 could allow an attacker to achieve unauthorized remote code execution via a crafted UDP packet.

Affected products

Vendor	Product	Affected	Fixed
Zyxel	Zyxel NAS326 firmware	< V5.21(AAZF.12)C0	—

References

https://www.zyxel.com/support/Zyxel-security-advisory-for-format-string-vulnerability-in-NAS.shtml