critical9.8Public exploit code
CVE-2021-4039
A command injection vulnerability in the web interface of the Zyxel NWA-1100-NH firmware could allow an attacker to execute arbitrary OS commands on the device.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Zyxel NWA-1100-NH - Command Injection2022-04-19 · remote · hardware
Impact
A command injection vulnerability in the web interface of the Zyxel NWA-1100-NH firmware could allow an attacker to execute arbitrary OS commands on the device.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zyxel | Nwa1100-Nh Firmware | before 2.12\(aasi.3\)c0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/166752/Zyxel-NWA-1100-NH-Command-Injection.html
- https://www.zyxel.com/support/OS-command-injection-vulnerability-of-NWA1100-NH-access-point.shtml
- http://packetstormsecurity.com/files/166752/Zyxel-NWA-1100-NH-Command-Injection.html
- https://www.zyxel.com/support/OS-command-injection-vulnerability-of-NWA1100-NH-access-point.shtml