CVE-2024-8234

No fix known EPSS 4%CVSS 7.5

** UNSUPPORTED WHEN ASSIGNED ** A command injection vulnerability in the functions formSysCmd(), formUpgradeCert(), and formDelcert() in the Zyxel NWA1100-N firmware version 1.00(AACE.1)C0 could allow an unauthenticated attacker to execute some OS commands to access system files on an affected device.

Published 2024-08-30 · CVE record · OSV

Products: zyxel nwa1100-n_firmware