Zyxel NAS326 Firmware vulnerabilities

24 CVEs affecting Zyxel NAS326 Firmware, 2 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-6342, published 2024-09-10.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2020-9054: Zyxel Multiple NAS Devices OS Command Injection Vulnerability, published 2020-03-04. Critical severity, CVSS 9.8. Actively exploited: in CISA KEV since 2022-03-25. EPSS: 100% chance of exploitation in the next 30 days. Multiple ZyXEL network-attached storage (NAS) devices running firmware version 5.21 contain a pre-authentication command injection vulnerability, which may allow a remote, unauthenticated attacker to…
CVE-2023-27992: Zyxel Multiple NAS Devices Command Injection Vulnerability, published 2023-06-19. Critical severity, CVSS 9.8. Actively exploited: in CISA KEV since 2023-06-23. EPSS: 82.8% chance of exploitation in the next 30 days. The pre-authentication command injection vulnerability in the Zyxel NAS326 firmware versions prior to V5.21(AAZF.14)C0, NAS540 firmware versions prior to V5.21(AATB.11)C0, and NAS542 firmware…
CVE-2024-29972, published 2024-06-04. Critical severity, CVSS 9.8. EPSS: 89.3% chance of exploitation in the next 30 days. ** UNSUPPORTED WHEN ASSIGNED ** The command injection vulnerability in the CGI program "remote_help-cgi" in Zyxel NAS326 firmware versions before V5.21(AAZF.17)C0 and NAS542 firmware versions…
CVE-2024-29973, published 2024-06-04. Critical severity, CVSS 9.8. EPSS: 86.1% chance of exploitation in the next 30 days. ** UNSUPPORTED WHEN ASSIGNED ** The command injection vulnerability in the “setCookie” parameter in Zyxel NAS326 firmware versions before V5.21(AAZF.17)C0 and NAS542 firmware versions…
CVE-2023-37928, published 2023-11-30. High severity, CVSS 8.8. EPSS: 60.2% chance of exploitation in the next 30 days. A post-authentication command injection vulnerability in the WSGI server of the Zyxel NAS326 firmware version V5.21(AAZF.14)C0 and NAS542 firmware version V5.21(ABAG.11)C0 could allow an…
CVE-2023-4473, published 2023-11-30. Critical severity, CVSS 9.8. EPSS: 41.3% chance of exploitation in the next 30 days. A command injection vulnerability in the web server of the Zyxel NAS326 firmware version V5.21(AAZF.14)C0 and NAS542 firmware version V5.21(ABAG.11)C0 could allow an unauthenticated attacker to…
CVE-2023-35138, published 2023-11-30. Critical severity, CVSS 9.8. EPSS: 40% chance of exploitation in the next 30 days. A command injection vulnerability in the “show_zysync_server_contents” function of the Zyxel NAS326 firmware version V5.21(AAZF.14)C0 and NAS542 firmware version V5.21(ABAG.11)C0 could allow an…
CVE-2023-4474, published 2023-11-30. Critical severity, CVSS 9.8. EPSS: 29.7% chance of exploitation in the next 30 days. The improper neutralization of special elements in the WSGI server of the Zyxel NAS326 firmware version V5.21(AAZF.14)C0 and NAS542 firmware version V5.21(ABAG.11)C0 could allow an unauthenticated…
CVE-2023-5372, published 2024-01-30. High severity, CVSS 7.2. EPSS: 28.5% chance of exploitation in the next 30 days. The post-authentication command injection vulnerability in Zyxel NAS326 firmware versions through V5.21(AAZF.15)C0 and NAS542 firmware versions through V5.21(ABAG.12)C0 could allow an authenticated…
CVE-2024-29974, published 2024-06-04. Critical severity, CVSS 9.8. EPSS: 22.8% chance of exploitation in the next 30 days. ** UNSUPPORTED WHEN ASSIGNED ** The remote code execution vulnerability in the CGI program “file_upload-cgi” in Zyxel NAS326 firmware versions before V5.21(AAZF.17)C0 and NAS542 firmware versions…

Latest

CVE-2024-6342, published 2024-09-10. Critical severity, CVSS 9.8. EPSS: 2.1% chance of exploitation in the next 30 days. **UNSUPPORTED WHEN ASSIGNED** A command injection vulnerability in the export-cgi program of Zyxel NAS326 firmware versions through V5.21(AAZF.18)C0 and NAS542 firmware versions through…
CVE-2024-29976, published 2024-06-04. Medium severity, CVSS 6.5. EPSS: 9% chance of exploitation in the next 30 days. ** UNSUPPORTED WHEN ASSIGNED ** The improper privilege management vulnerability in the command “show_allsessions” in Zyxel NAS326 firmware versions before V5.21(AAZF.17)C0 and NAS542 firmware…
CVE-2024-29975, published 2024-06-04. Medium severity, CVSS 6.7. EPSS: 0.5% chance of exploitation in the next 30 days. ** UNSUPPORTED WHEN ASSIGNED ** The improper privilege management vulnerability in the SUID executable binary in Zyxel NAS326 firmware versions before V5.21(AAZF.17)C0 and NAS542 firmware versions…