CVE-2024-8234 HIGH

CVE-2024-8234

Vendor Zyxel
Product NWA1100-N firmware
Weakness CWE-78
Published August 30, 2024
Last update August 30, 2024
View on NVD All CVEs

CVSS base score

7.5/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality High
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

What the vulnerability does

01Description

** UNSUPPORTED WHEN ASSIGNED ** A command injection vulnerability in the functions formSysCmd(), formUpgradeCert(), and formDelcert() in the Zyxel NWA1100-N firmware version 1.00(AACE.1)C0 could allow an unauthenticated attacker to execute some OS commands to access system files on an affected device.

Key dates

02Disclosure timeline

August 30, 2024 CVE published
August 30, 2024 Record updated