NF
Product
NAS326 firmware
On CISA KEVExploited in the wild
24
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 10High 10Medium 4Low 0
Watch
Add NAS326 firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-29975 | 6.7 | Jun 4 | ** UNSUPPORTED WHEN ASSIGNED ** The improper privilege management vulnerability in the SUID executable binary in Zyxel NAS326 firmware versions before V5.21(AAZF.17)C0 and NAS542… Affected: before 5.21\(aazf.17\)c0 |
| CVE-2024-29976 | 6.5 | Jun 4 | ** UNSUPPORTED WHEN ASSIGNED ** The improper privilege management vulnerability in the command “show_allsessions” in Zyxel NAS326 firmware versions before V5.21(AAZF.17)C0 and… Affected: before 5.21\(aazf.17\)c0 |
| CVE-2019-10632 | 6.5 | Apr 9 | A directory traversal vulnerability in the file browser component on the Zyxel NAS 326 version 5.21 and below allows a lower privileged user to change the location of any other… Affected: through 5.21 |
| CVE-2019-10634 | 5.4 | Apr 9 | An XSS vulnerability in the Zyxel NAS 326 version 5.21 and below allows a remote authenticated attacker to inject arbitrary JavaScript or HTML via the user, group, and file-share… Affected: through 5.21 |
Showing 4