← Database

CVE-2022-26413

HIGH CVSS: 8.0 Published: 2022-04-11 Modified: 2026-06-17

Description

A command injection vulnerability in the CGI program of Zyxel VMG3312-T20A firmware version 5.30(ABFX.5)C0 could allow a local authenticated attacker to execute arbitrary OS commands on a vulnerable device via a LAN interface.

Affected Platforms

Zyxel Vmg1312-T20BZyxel Vmg4927-B50AZyxel Pmg5622GaZyxel Pmg5617GaZyxel Ex5401-B0Zyxel Vmg3625-T50B FirmwareZyxel Vmg3927-T50K FirmwareZyxel Vmg3927-B60AZyxel Pm7300-T0 FirmwareZyxel Dx5401-B0 Firmware

Weakness Type

CWE-78, CWE-78

References