Zyxel Multiple Firewalls OS Command Injection Vulnerability
Zyxel · Multiple Firewalls
Date added (CISA)
2022-05-16
Remediation due
2022-06-06
Known ransomware use
Not indicated
Remediation priority
P2 — past CISA due date
Description
A command injection vulnerability in the CGI program of some Zyxel firewall versions could allow an attacker to modify specific files and then execute some OS commands on a vulnerable device.