Description
A post-authentication command injection vulnerability in the ”zyUtilMailSend” function of the Zyxel AX7501-B1 firmware version V5.17(ABPC.5.3)C0 and earlier could allow an authenticated attacker with administrator privileges to execute operating system (OS) commands on a vulnerable device.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Zyxel | AX7501-B1 firmware | <= V5.17(ABPC.5.3)C0 | — |