Zyxel

Nas520 Firmware

3 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9

CVE-2020-13364

  • EPSS 0.24%
  • Published 06.08.2020 17:15:10
  • Last modified 21.11.2024 05:01:07

A backdoor in certain Zyxel products allows remote TELNET access via a CGI script. This affects NAS520 V5.21(AASZ.4)C0, V5.21(AASZ.0)C0, V5.11(AASZ.3)C0, and V5.11(AASZ.0)C0; NAS542 V5.11(ABAG.0)C0, V5.20(ABAG.1)C0, and V5.21(ABAG.3)C0; NSA325 v2_V4....

9

CVE-2020-13365

  • EPSS 0.13%
  • Published 06.08.2020 17:15:10
  • Last modified 21.11.2024 05:01:07

Certain Zyxel products have a locally accessible binary that allows a non-root user to generate a password for an undocumented user account that can be used for a TELNET session as root. This affects NAS520 V5.21(AASZ.4)C0, V5.21(AASZ.0)C0, V5.11(AAS...

10

CVE-2020-9054

Warning Exploit
  • EPSS 94.31%
  • Published 04.03.2020 20:15:10
  • Last modified 21.03.2025 19:50:32

Multiple ZyXEL network-attached storage (NAS) devices running firmware version 5.21 contain a pre-authentication command injection vulnerability, which may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable device. ZyX...