high7.2
CVE-2024-12009
A post-authentication command injection vulnerability in the "ZyEE" function of the Zyxel EX5601-T1 firmware version V5.70(ACDZ.3.6)C0 and earlier could allow …
Impact
A post-authentication command injection vulnerability in the "ZyEE" function of the Zyxel EX5601-T1 firmware version V5.70(ACDZ.3.6)C0 and earlier could allow an authenticated attacker with administrator privileges to execute operating system (OS) commands on a vulnerable device.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zyxel | Dx3300-T0 Firmware | through 5.50\(abvy.5.4\)c0 |
| Zyxel | Dx3300-T1 Firmware | through 5.50\(abvy.5.4\)c0 |
| Zyxel | Dx3301-T0 Firmware | through 5.50\(abvy.5.4\)c0 |
| Zyxel | Dx4510-B0 Firmware | through 5.17\(abyl.8\)c0 |
| Zyxel | Dx4510-B1 Firmware | through 5.17\(abyl.8\)c0 |
| Zyxel | Dx5401-B0 Firmware | through 5.17\(abyo.6.4\)c0 |
| Zyxel | Dx5401-B1 Firmware | through 5.17\(abyo.6.4\)c0 |
| Zyxel | Ee6510-10 Firmware | through 5.19\(acjq.1\)c1 |
| Zyxel | Ex3300-T0 Firmware | through 5.50\(abvy.5.4\)c0 |
| Zyxel | Ex3300-T1 Firmware | through 5.50\(abvy.5.4\)c0 |
| Zyxel | Ex3301-T0 Firmware | through 5.50\(abvy.5.4\)c0 |
| Zyxel | Ex3500-T0 Firmware | through 5.44\(achr.3\)c0 |