CVE-2024-7261: OS Command Injection
First published: Tue Sep 03 2024(Updated: )
The improper neutralization of special elements in the parameter "host" in the CGI program of Zyxel NWA1123ACv3 firmware version 6.70(ABVT.4) and earlier, WAC500 firmware version 6.70(ABVS.4) and earlier, WAX655E firmware version 7.00(ACDO.1) and earlier, WBE530 firmware version 7.00(ACLE.1) and earlier, and USG LITE 60AX firmware version V2.00(ACIP.2) could allow an unauthenticated attacker to execute OS commands by sending a crafted cookie to a vulnerable device.
Credit: security@zyxel.com.tw
| Affected Software | Affected Version | How to fix |
|---|---|---|
| All of | ||
| Zyxel NWA110AX firmware | <7.00\(abtg.2\) | |
| Zyxel NWA110AX | ||
| All of | ||
| Zyxel Nwa1123-ac Pro Firmware | <6.28\(abhd.3\) | |
| Zyxel Nwa1123-ac Pro | ||
| All of | ||
| Zyxel NWA1123ACv3 firmware | <6.70\(abvt.5\) | |
| Zyxel NWA1123ACv3 | ||
| All of | ||
| Zyxel Nwa130be Firmware | <7.00\(acil.2\) | |
| Zyxel Nwa130be | ||
| All of | ||
| Zyxel Nwa210ax Firmware | <7.00\(abtd.2\) | |
| Zyxel Nwa210ax | ||
| All of | ||
| Zyxel Nwa220ax-6e Firmware | <7.00\(acco.2\) | |
| Zyxel Nwa220ax-6e | ||
| All of | ||
| Zyxel Nwa50ax Firmware | <7.00\(abyw.2\) | |
| Zyxel Nwa50ax | ||
| All of | ||
| Zyxel Nwa50ax Pro Firmware | <7.00\(acge.2\) | |
| Zyxel Nwa50ax Pro | ||
| All of | ||
| Zyxel Nwa55axe Firmware | <7.00\(abzl.2\) | |
| Zyxel Nwa55axe | ||
| All of | ||
| Zyxel Nwa90ax Firmware | <7.00\(accv.2\) | |
| Zyxel Nwa90ax | ||
| All of | ||
| Zyxel Nwa90ax Pro Firmware | <7.00\(acgf.2\) | |
| Zyxel Nwa90ax Pro | ||
| All of | ||
| Zyxel Usg Lite 60ax Firmware | <v2.00\(acip.3\) | |
| Zyxel Usg Lite 60ax | ||
| All of | ||
| Zyxel Wac500 Firmware | <6.70\(abvs.5\) | |
| Zyxel Wac500 | ||
| All of | ||
| Zyxel Wac500h Firmware | <6.70\(abwa.5\) | |
| Zyxel Wac500h | ||
| All of | ||
| Zyxel Wac6103d-i Firmware | <6.28\(aaxh.3\) | |
| Zyxel Wac6103d-i | ||
| All of | ||
| Zyxel Wac6502d-s Firmware | <6.28\(aase.3\) | |
| Zyxel Wac6502d-s | ||
| All of | ||
| Zyxel Wac6503d-s Firmware | <6.28\(aasf.3\) | |
| Zyxel Wac6503d-s | ||
| All of | ||
| Zyxel Wac6552d-s Firmware | <6.28\(abio.3\) | |
| Zyxel Wac6552d-s | ||
| All of | ||
| Zyxel Wac6553d-e Firmware | <6.28\(aasg.3\) | |
| Zyxel Wac6553d-e | ||
| All of | ||
| Zyxel Wax300h Firmware | <7.00\(achf.2\) | |
| Zyxel Wax300h | ||
| All of | ||
| Zyxel Wax510d Firmware | <7.00\(abtf.2\) | |
| Zyxel Wax510d | ||
| All of | ||
| Zyxel Wax610d Firmware | <7.00\(abte.2\) | |
| Zyxel Wax610d | ||
| All of | ||
| Zyxel Wax620d-6e Firmware | <7.00\(accn.2\) | |
| Zyxel Wax620d-6e | ||
| All of | ||
| Zyxel Wax630s Firmware | <7.00\(abzd.2\) | |
| Zyxel Wax630s | ||
| All of | ||
| Zyxel Wax640s-6e Firmware | <7.00\(accm.2\) | |
| Zyxel Wax640s-6e | ||
| All of | ||
| Zyxel Wax650s Firmware | <7.00\(abrm.2\) | |
| Zyxel Wax650s | ||
| All of | ||
| Zyxel Wax655e Firmware | <7.00\(acdo.2\) | |
| Zyxel Wax655e | ||
| All of | ||
| Zyxel WBE530 firmware | <7.00\(acle.2\) | |
| Zyxel WBE530 firmware | ||
| All of | ||
| Zyxel WBE660S firmware | <7.00\(acgg.2\) | |
| Zyxel WBE660S firmware |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- agent/weakness
- agent/description
- agent/first-publish-date
- agent/type
- agent/severity
- agent/author
- collector/bleeping-computer
- source/BleepingComputer
- alias/CVE-2024-7261
- alias/CVE-2024-42057
- agent/references
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/event
- collector/epss-latest
- source/FIRST
- agent/epss
- agent/trending
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/zyxel
- canonical/zyxel nwa110ax firmware
- canonical/zyxel nwa110ax
- canonical/zyxel nwa1123-ac pro firmware
- canonical/zyxel nwa1123-ac pro
- canonical/zyxel nwa1123acv3 firmware
- canonical/zyxel nwa1123acv3
- canonical/zyxel nwa130be firmware
- canonical/zyxel nwa130be
- canonical/zyxel nwa210ax firmware
- canonical/zyxel nwa210ax
- canonical/zyxel nwa220ax-6e firmware
- canonical/zyxel nwa220ax-6e
- canonical/zyxel nwa50ax firmware
- canonical/zyxel nwa50ax
- canonical/zyxel nwa50ax pro firmware
- canonical/zyxel nwa50ax pro
- canonical/zyxel nwa55axe firmware
- canonical/zyxel nwa55axe
- canonical/zyxel nwa90ax firmware
- canonical/zyxel nwa90ax
- canonical/zyxel nwa90ax pro firmware
- canonical/zyxel nwa90ax pro
- canonical/zyxel usg lite 60ax firmware
- canonical/zyxel usg lite 60ax
- canonical/zyxel wac500 firmware
- canonical/zyxel wac500
- canonical/zyxel wac500h firmware
- canonical/zyxel wac500h
- canonical/zyxel wac6103d-i firmware
- canonical/zyxel wac6103d-i
- canonical/zyxel wac6502d-s firmware
- canonical/zyxel wac6502d-s
- canonical/zyxel wac6503d-s firmware
- canonical/zyxel wac6503d-s
- canonical/zyxel wac6552d-s firmware
- canonical/zyxel wac6552d-s
- canonical/zyxel wac6553d-e firmware
- canonical/zyxel wac6553d-e
- canonical/zyxel wax300h firmware
- canonical/zyxel wax300h
- canonical/zyxel wax510d firmware
- canonical/zyxel wax510d
- canonical/zyxel wax610d firmware
- canonical/zyxel wax610d
- canonical/zyxel wax620d-6e firmware
- canonical/zyxel wax620d-6e
- canonical/zyxel wax630s firmware
- canonical/zyxel wax630s
- canonical/zyxel wax640s-6e firmware
- canonical/zyxel wax640s-6e
- canonical/zyxel wax650s firmware
- canonical/zyxel wax650s
- canonical/zyxel wax655e firmware
- canonical/zyxel wax655e
- canonical/zyxel wbe530 firmware
- canonical/zyxel wbe660s firmware