CVE-2023-35138

Published: 2023-11-30T02:15Z

Last Modified: 2024-11-21T08:08Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

A command injection vulnerability in the “show_zysync_server_contents” function of the Zyxel NAS326 firmware version V5.21(AAZF.14)C0 and NAS542 firmware version V5.21(ABAG.11)C0 could allow an unauthenticated attacker to execute some operating system (OS) commands by sending a crafted HTTP POST request. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt