CVE-2024-7261
Critical
Description
The improper neutralization of special elements in the parameter "host" in the CGI program of Zyxel NWA1123ACv3 firmware version 6.70(ABVT.4) and earlier, WAC500 firmware version 6.70(ABVS.4) and earlier, WAX655E firmware version 7.00(ACDO.1) and earlier, WBE530 firmware version 7.00(ACLE.1) and earlier, and USG LITE 60AX firmware version V2.00(ACIP.2) could allow an unauthenticated attacker to execute OS commands by sending a crafted cookie to a vulnerable device.
SeverityCritical
CVSS9.8
Exploit probability—
Product
Zyxel Nwa1123acv3 Firmware
PublishedSep 3, 2024
First seenSep 3, 2024
Weakness typeCWE-78OS command injection
How to fix
Update
- zyxel nwa1123acv3_firmware6.70\(abvt.5\) or later
- zyxel nwa110ax_firmware7.00\(abtg.2\) or later
- zyxel nwa1123-ac_pro_firmware6.28\(abhd.3\) or later
- zyxel nwa130be_firmware7.00\(acil.2\) or later
- zyxel nwa210ax_firmware7.00\(abtd.2\) or later
- zyxel nwa220ax-6e_firmware7.00\(acco.2\) or later
- zyxel nwa50ax_firmware7.00\(abyw.2\) or later
- zyxel nwa50ax_pro_firmware7.00\(acge.2\) or later
- zyxel nwa55axe_firmware7.00\(abzl.2\) or later
- zyxel nwa90ax_firmware7.00\(accv.2\) or later
- zyxel nwa90ax_pro_firmware7.00\(acgf.2\) or later
- zyxel usg_lite_60ax_firmwarev2.00\(acip.3\) or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| zyxel nwa1123acv3_firmware | v < 6.70\(abvt.5\) | 6.70\(abvt.5\) |
| zyxel nwa110ax_firmware | v < 7.00\(abtg.2\) | 7.00\(abtg.2\) |
| zyxel nwa1123-ac_pro_firmware | v < 6.28\(abhd.3\) | 6.28\(abhd.3\) |
| zyxel nwa130be_firmware | v < 7.00\(acil.2\) | 7.00\(acil.2\) |
| zyxel nwa210ax_firmware | v < 7.00\(abtd.2\) | 7.00\(abtd.2\) |
| zyxel nwa220ax-6e_firmware | v < 7.00\(acco.2\) | 7.00\(acco.2\) |
| zyxel nwa50ax_firmware | v < 7.00\(abyw.2\) | 7.00\(abyw.2\) |
| zyxel nwa50ax_pro_firmware | v < 7.00\(acge.2\) | 7.00\(acge.2\) |
| zyxel nwa55axe_firmware | v < 7.00\(abzl.2\) | 7.00\(abzl.2\) |
| zyxel nwa90ax_firmware | v < 7.00\(accv.2\) | 7.00\(accv.2\) |
| zyxel nwa90ax_pro_firmware | v < 7.00\(acgf.2\) | 7.00\(acgf.2\) |
| zyxel usg_lite_60ax_firmware | v < v2.00\(acip.3\) | v2.00\(acip.3\) |
| zyxel wac500_firmware | v < 6.70\(abvs.5\) | 6.70\(abvs.5\) |
| zyxel wac500h_firmware | v < 6.70\(abwa.5\) | 6.70\(abwa.5\) |
| zyxel wac6103d-i_firmware | v < 6.28\(aaxh.3\) | 6.28\(aaxh.3\) |
| zyxel wac6502d-s_firmware | v < 6.28\(aase.3\) | 6.28\(aase.3\) |
| zyxel wac6503d-s_firmware | v < 6.28\(aasf.3\) | 6.28\(aasf.3\) |
| zyxel wac6552d-s_firmware | v < 6.28\(abio.3\) | 6.28\(abio.3\) |
| zyxel wac6553d-e_firmware | v < 6.28\(aasg.3\) | 6.28\(aasg.3\) |
| zyxel wax300h_firmware | v < 7.00\(achf.2\) | 7.00\(achf.2\) |
| zyxel wax510d_firmware | v < 7.00\(abtf.2\) | 7.00\(abtf.2\) |
| zyxel wax610d_firmware | v < 7.00\(abte.2\) | 7.00\(abte.2\) |
| zyxel wax620d-6e_firmware | v < 7.00\(accn.2\) | 7.00\(accn.2\) |
| zyxel wax630s_firmware | v < 7.00\(abzd.2\) | 7.00\(abzd.2\) |
| zyxel wax640s-6e_firmware | v < 7.00\(accm.2\) | 7.00\(accm.2\) |
| zyxel wax650s_firmware | v < 7.00\(abrm.2\) | 7.00\(abrm.2\) |
| zyxel wax655e_firmware | v < 7.00\(acdo.2\) | 7.00\(acdo.2\) |
| zyxel wbe530_firmware | v < 7.00\(acle.2\) | 7.00\(acle.2\) |
| zyxel wbe660s_firmware | v < 7.00\(acgg.2\) | 7.00\(acgg.2\) |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.