The improper neutralization of special elements in the CGI program of the Zyxel NAS326 firmware version V5.21(AAZF.14)C0 and NAS542 firmware version V5.21(ABAG.11)C0 could allow an authenticated attacker to execute some operating system (OS) commands by sending a crafted URL to a vulnerable device.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: Zyxel

Published: 2023-11-30T01:34:28.528Z

Updated: 2024-08-02T17:23:27.790Z

Reserved: 2023-07-11T01:52:33.655Z

Link: CVE-2023-37927

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2023-11-30T02:15:42.940

Modified: 2023-12-06T01:15:07.307

Link: CVE-2023-37927

cve-icon Redhat

No data.