high8.8
CVE-2019-10631
Shell Metacharacter Injection in the package installer on Zyxel NAS 326 version 5.21 and below allows an authenticated attacker to execute arbitrary code via m…
Impact
Shell Metacharacter Injection in the package installer on Zyxel NAS 326 version 5.21 and below allows an authenticated attacker to execute arbitrary code via multiple different requests.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zyxel | Nas326 Firmware | through 5.21 |