high7.2
CVE-2024-11253
A post-authentication command injection vulnerability in the "DNSServer” parameter of the diagnostic function in the Zyxel VMG8825-T50K firmware version V5.50(…
Impact
A post-authentication command injection vulnerability in the "DNSServer” parameter of the diagnostic function in the Zyxel VMG8825-T50K firmware version V5.50(ABOM.8.5)C0 and earlier could allow an authenticated attacker with administrator privileges to execute operating system (OS) commands on a vulnerable device.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zyxel | Emg5723-T50k Firmware | through 5.50\(abom.8.5\)c0 |
| Zyxel | Dm4200-B0 Firmware | through 5.17\(acbs.1\)c0 |
| Zyxel | Vmg3927-T50k Firmware | through 5.50\(abom.8.5\)c0 |
| Zyxel | Vmg4005-B50a Firmware | through 5.15\(abqa.2.3\)c0 |
| Zyxel | Vmg4005-B60a Firmware | through 5.15\(abqa.2.3\)c0 |
| Zyxel | Vmg8825-T50k Firmware | through 5.50\(abom.8.5\)c0 |