CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2020-03-04
ZyXEL NAS Devices weblogin.cgi Pre-Authentication Remote Code Execution (RCE) Vulnerability (CVE-2020-9054)
[Affected Scope] ZyXEL NAS devices (NAS326, NAS520, NAS540, NAS542) running firmware versions prior to 5.21, and all end-of-support NSA series models
[Impact] An unauthenticated remote attacker can execute arbitrary OS commands with root privileges by sending a specially crafted HTTP request
[Mitigation] Immediately upgrade active models to the patched firmware versions, and isolate or replace end-of-support (EoL) models from the network