← Database
CVE-2024-9200
HIGH
CVSS: 7.2
Published: 2024-12-03
Modified: 2026-06-17
Description
A post-authentication command injection vulnerability in the "host" parameter of the diagnostic function in Zyxel VMG4005-B50A firmware versions through V5.15(ABQA.2.2)C0 could allow an authenticated attacker with administrator privileges to execute operating system (OS) commands on a vulnerable device.
Affected Platforms
Zyxel Vmg4927-B50AZyxel Vmg3927-B50BZyxel Vmg4005-B60A FirmwareZyxel Emg6726-B10AZyxel Vmg4005-B50A FirmwareZyxel Emg6726-B10A FirmwareZyxel Vmg4005-B50B FirmwareZyxel Vmg4927-B50A FirmwareZyxel Vmg4005-B60AZyxel Vmg4005-B50B