High · 8.8 CVE-2023-22919 EUVD-2023-27021GHSA-wmmw-j7h9-37rf

The post-authentication command injection vulnerability in the Zyxel NBG6604 firmware version V1.01(ABIR.0)C0 could allow an authenticated …

Published May 1, 2023 · Updated Jan 30, 2025 · Assigned by Zyxel

Vendor: Zyxel Product: NBG6604 firmware Category: Network devices

Description

The post-authentication command injection vulnerability in the Zyxel NBG6604 firmware version V1.01(ABIR.0)C0 could allow an authenticated attacker to execute some OS commands remotely by sending a crafted HTTP request.

Affected products

Vendor	Product	Affected	Fixed
Zyxel	NBG6604 firmware	V1.01(ABIR.0)C0	—

References

https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-post-authentication-command-injection-vulnerability-in-nbg6604-home-router