- Vendor / Project
- Zyxel
- Product
- Multiple Firewalls
- Date added
- May 16, 2022
- Due date
- Jun 6, 2022
- Known ransomware use
- Unknown
- CWEs
- CWE-78
Description
A command injection vulnerability in the CGI program of some Zyxel firewall versions could allow an attacker to modify specific files and then execute some OS commands on a vulnerable device.
Required action
Apply updates per vendor instructions.