Skip to content
OpenAdvisories
High · 7.5 CVE-2024-8234 EUVD-2024-49039GHSA-wfxq-5cv4-254v

** UNSUPPORTED WHEN ASSIGNED ** A command injection vulnerability in the functions formSysCmd(), formUpgradeCert(), and formDelcert() in th…

Published Aug 30, 2024 · Updated Aug 30, 2024 · Assigned by Zyxel

Description

** UNSUPPORTED WHEN ASSIGNED ** A command injection vulnerability in the functions formSysCmd(), formUpgradeCert(), and formDelcert() in the Zyxel NWA1100-N firmware version 1.00(AACE.1)C0 could allow an unauthenticated attacker to execute some OS commands to access system files on an affected device.

Affected products

VendorProductAffectedFixed
Zyxel NWA1100-N firmware 1.00(AACE.1)C0 —

References