NF
Product
Nas520 Firmware
On CISA KEVExploited in the wild
3
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 2Medium 0Low 0
Watch
Add Nas520 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-9054 In wildKEV | 9.8 | Mar 4 | ZyXEL NAS products running firmware version 5.21 and earlier are vulnerable to pre-authentication command injection in weblogin.cgi Affected: before 5.21\(aasz.3\)c0 |
| CVE-2020-13365 | 8.8 | Aug 6 | Certain Zyxel products have a locally accessible binary that allows a non-root user to generate a password for an undocumented user account that can be used for a TELNET session… Affected: before v5.21\(aasz.5\)c0 |
| CVE-2020-13364 | 8.8 | Aug 6 | A backdoor in certain Zyxel products allows remote TELNET access via a CGI script Affected: before v5.21\(aasz.5\)c0 |
Showing 3