CVE-2024-29975: Medium severity zyxel nas326 vulnerability
UNSUPPORTED WHEN ASSIGNED The improper privilege management vulnerability in the SUID executable binary in Zyxel NAS326 firmware versions before V5.21(AAZF.17)C0 and NAS542 firmware versions before V5.21(ABAG.14)C0 could allow an authenticated local attacker with administrator privileges to execute some system commands as the “root” user on a vulnerable device.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-29975?
CVE-2024-29975 is classified as a high-severity vulnerability due to its potential to allow unauthorized privilege escalation.
How do I fix CVE-2024-29975?
To fix CVE-2024-29975, upgrade your Zyxel NAS326 firmware to version V5.21(AAZF.17)C0 or NAS542 firmware to version V5.21(ABAG.14)C0.
Who can exploit CVE-2024-29975?
CVE-2024-29975 can be exploited by authenticated local attackers with administrator privileges on the affected Zyxel devices.
What devices are affected by CVE-2024-29975?
CVE-2024-29975 affects Zyxel NAS326 and NAS542 devices running firmware versions prior to V5.21(AAZF.17)C0 and V5.21(ABAG.14)C0 respectively.
What are the risks associated with CVE-2024-29975?
The risks associated with CVE-2024-29975 include unauthorized access and the ability to execute arbitrary commands due to improper privilege management.