CVE-2017-15226

Zyxel NBG6716 V1.00(AAKG.9)C0 devices allow command injection in the ozkerz component because beginIndex and endIndex are used directly in a popen call.

Score

CVSS 3.0 9.8 Critical

Status

Modified - cve@mitre.org

Published

2017-10-10

Last modified

2024-09-17

Weaknesses

CWE-78

Affected products

• Nbg6716 Firmware (Zyxel)

References

• https://www.secarma.co.uk/labs/sohopelessly-broken-0-day-strategy/