nas326_firmware Archives - CVE Vulnerability

nas326_firmware Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/nas326_firmware/ Sun, 26 Feb 2023 06:36:55 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png nas326_firmware Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/nas326_firmware/ 32 32 CVE-2020-13364 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-13364/ Sun, 26 Feb 2023 06:36:55 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-13364/ A backdoor in certain Zyxel products allows remote TELNET access via a CGI script. This affects NAS520 V5.21(AASZ.4)C0, V5.21(AASZ.0)C0, V5.11(AASZ.3)C0, and V5.11(AASZ.0)C0; NAS542 V5.11(ABAG.0)C0, V5.20(ABAG.1)C0, and V5.21(ABAG.3)C0; NSA325 v2_V4.81(AALS.0)C0 and V4.81(AAAJ.1)C0; NSA310 4.22(AFK.0)C0 and 4.22(AFK.1)C0; NAS326 V5.21(AAZF.8)C0, V5.11(AAZF.4)C0, V5.11(AAZF.2)C0, and V5.11(AAZF.3)C0; NSA310S V4.75(AALH.2)C0; NSA320S V4.75(AANV.2)C0 and V4.75(AANV.1)C0; NSA221 V4.41(AFM.1)C0; and NAS540 V5.21(AATB.5)C0 and V5.21(AATB.3)C0.

The post CVE-2020-13364 appeared first on CVE Vulnerability.

]]> A backdoor in certain Zyxel products allows remote TELNET access via a CGI script. This affects NAS520 V5.21(AASZ.4)C0, V5.21(AASZ.0)C0, V5.11(AASZ.3)C0, and V5.11(AASZ.0)C0; NAS542 V5.11(ABAG.0)C0, V5.20(ABAG.1)C0, and V5.21(ABAG.3)C0; NSA325 v2_V4.81(AALS.0)C0 and V4.81(AAAJ.1)C0; NSA310 4.22(AFK.0)C0 and 4.22(AFK.1)C0; NAS326 V5.21(AAZF.8)C0, V5.11(AAZF.4)C0, V5.11(AAZF.2)C0, and V5.11(AAZF.3)C0; NSA310S V4.75(AALH.2)C0; NSA320S V4.75(AANV.2)C0 and V4.75(AANV.1)C0; NSA221 V4.41(AFM.1)C0; and NAS540 V5.21(AATB.5)C0 and V5.21(AATB.3)C0.

The post CVE-2020-13364 appeared first on CVE Vulnerability.

]]> CVE-2020-13365 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-13365/ Sun, 26 Feb 2023 06:36:55 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-13365/ Certain Zyxel products have a locally accessible binary that allows a non-root user to generate a password for an undocumented user account that can be used for a TELNET session as root. This affects NAS520 V5.21(AASZ.4)C0, V5.21(AASZ.0)C0, V5.11(AASZ.3)C0, and V5.11(AASZ.0)C0; NAS542 V5.11(ABAG.0)C0, V5.20(ABAG.1)C0, and V5.21(ABAG.3)C0; NSA325 v2_V4.81(AALS.0)C0 and V4.81(AAAJ.1)C0; NSA310 4.22(AFK.0)C0 and 4.22(AFK.1)C0; NAS326 V5.21(AAZF.8)C0, […]

The post CVE-2020-13365 appeared first on CVE Vulnerability.

]]> Certain Zyxel products have a locally accessible binary that allows a non-root user to generate a password for an undocumented user account that can be used for a TELNET session as root. This affects NAS520 V5.21(AASZ.4)C0, V5.21(AASZ.0)C0, V5.11(AASZ.3)C0, and V5.11(AASZ.0)C0; NAS542 V5.11(ABAG.0)C0, V5.20(ABAG.1)C0, and V5.21(ABAG.3)C0; NSA325 v2_V4.81(AALS.0)C0 and V4.81(AAAJ.1)C0; NSA310 4.22(AFK.0)C0 and 4.22(AFK.1)C0; NAS326 V5.21(AAZF.8)C0, V5.11(AAZF.4)C0, V5.11(AAZF.2)C0, and V5.11(AAZF.3)C0; NSA310S V4.75(AALH.2)C0; NSA320S V4.75(AANV.2)C0 and V4.75(AANV.1)C0; NSA221 V4.41(AFM.1)C0; and NAS540 V5.21(AATB.5)C0 and V5.21(AATB.3)C0.

The post CVE-2020-13365 appeared first on CVE Vulnerability.

]]> CVE-2019-10630 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-10630/ Sun, 26 Feb 2023 06:29:16 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-10630/ A plaintext password vulnerability in the Zyxel NAS 326 through 5.21 allows an elevated privileged user to get the admin password of the device.

The post CVE-2019-10630 appeared first on CVE Vulnerability.

]]> A plaintext password vulnerability in the Zyxel NAS 326 through 5.21 allows an elevated privileged user to get the admin password of the device.

The post CVE-2019-10630 appeared first on CVE Vulnerability.

]]> CVE-2019-10631 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-10631/ Sun, 26 Feb 2023 06:29:16 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-10631/ Shell Metacharacter Injection in the package installer on Zyxel NAS 326 version 5.21 and below allows an authenticated attacker to execute arbitrary code via multiple different requests.

The post CVE-2019-10631 appeared first on CVE Vulnerability.

]]> Shell Metacharacter Injection in the package installer on Zyxel NAS 326 version 5.21 and below allows an authenticated attacker to execute arbitrary code via multiple different requests.

The post CVE-2019-10631 appeared first on CVE Vulnerability.

]]> CVE-2019-10632 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-10632/ Sun, 26 Feb 2023 06:29:16 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-10632/ A directory traversal vulnerability in the file browser component on the Zyxel NAS 326 version 5.21 and below allows a lower privileged user to change the location of any other user’s files.

The post CVE-2019-10632 appeared first on CVE Vulnerability.

]]> A directory traversal vulnerability in the file browser component on the Zyxel NAS 326 version 5.21 and below allows a lower privileged user to change the location of any other user’s files.

The post CVE-2019-10632 appeared first on CVE Vulnerability.

]]> CVE-2019-10633 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-10633/ Sun, 26 Feb 2023 06:29:16 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-10633/ An eval injection vulnerability in the Python web server routing on the Zyxel NAS 326 version 5.21 and below allows a remote authenticated attacker to execute arbitrary code via the tjp6jp6y4, simZysh, and ck6fup6 APIs.

The post CVE-2019-10633 appeared first on CVE Vulnerability.

]]> An eval injection vulnerability in the Python web server routing on the Zyxel NAS 326 version 5.21 and below allows a remote authenticated attacker to execute arbitrary code via the tjp6jp6y4, simZysh, and ck6fup6 APIs.

The post CVE-2019-10633 appeared first on CVE Vulnerability.

]]> CVE-2019-10634 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-10634/ Sun, 26 Feb 2023 06:29:16 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-10634/ An XSS vulnerability in the Zyxel NAS 326 version 5.21 and below allows a remote authenticated attacker to inject arbitrary JavaScript or HTML via the user, group, and file-share description fields.

The post CVE-2019-10634 appeared first on CVE Vulnerability.

]]> An XSS vulnerability in the Zyxel NAS 326 version 5.21 and below allows a remote authenticated attacker to inject arbitrary JavaScript or HTML via the user, group, and file-share description fields.

The post CVE-2019-10634 appeared first on CVE Vulnerability.

]]> CVE-2022-34747 https://cvevulnerability.com/cve_vulnerabilities/cve-2022-34747/ Thu, 23 Feb 2023 05:19:30 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2022-34747/ A format string vulnerability in Zyxel NAS326 firmware versions prior to V5.21(AAZF.12)C0 could allow an attacker to achieve unauthorized remote code execution via a crafted UDP packet.

The post CVE-2022-34747 appeared first on CVE Vulnerability.

]]> A format string vulnerability in Zyxel NAS326 firmware versions prior to V5.21(AAZF.12)C0 could allow an attacker to achieve unauthorized remote code execution via a crafted UDP packet.

The post CVE-2022-34747 appeared first on CVE Vulnerability.

]]>