CVE-2019-10632: Path Traversal
Published Apr 9, 2019
·Updated
A directory traversal vulnerability in the file browser component on the Zyxel NAS 326 version 5.21 and below allows a lower privileged user to change the location of any other user's files.
Affected Software
2 affected components
Zyxel NAS326<=5.21
Zyxel NAS326
Event History
Apr 9, 2019
CVE Published
via MITRE·04:59 AM
Data Sourced
via MITRE·04:59 AM
Description
Frequently Asked Questions
1
What is CVE-2019-10632?
CVE-2019-10632 is a directory traversal vulnerability in the file browser component on the Zyxel NAS 326 version 5.21 and below.
2
How does CVE-2019-10632 affect Zyxel NAS 326?
CVE-2019-10632 allows a lower privileged user to change the location of any other user's files on Zyxel NAS 326 version 5.21 and below.
3
What is the severity of CVE-2019-10632?
The severity of CVE-2019-10632 is medium with a CVSS score of 6.5.
4
How can I fix CVE-2019-10632 on Zyxel NAS 326?
To fix CVE-2019-10632, update Zyxel NAS 326 firmware to version 5.22 or higher.
5
Where can I find more information about CVE-2019-10632?
More information about CVE-2019-10632 can be found at http://maxwelldulin.com/BlogPost?post=3236967424.