← Database

CVE-2024-8234

HIGH CVSS: 7.5 Published: 2024-08-30 Modified: 2026-06-17

Description

** UNSUPPORTED WHEN ASSIGNED ** A command injection vulnerability in the functions formSysCmd(), formUpgradeCert(), and formDelcert() in the Zyxel NWA1100-N firmware version 1.00(AACE.1)C0 could allow an unauthenticated attacker to execute some OS commands to access system files on an affected device.

Affected Platforms

Zyxel Nwaw1100-NZyxel Nwaw1100-N Firmware

Weakness Type

CWE-78

References