Description
Multiple Zyxel DSL CPE devices contain a post-authentication command injection vulnerability in the CGI program that could allow an authenticated attacker to execute OS commands via a crafted HTTP request.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| VMG4325-B10A firmware | Zyxel / VMG4325-B10A firmware | <= 1.00(AAFR.4)C0_20170615 | affected |