CVE-2022-26413

A command injection vulnerability in the CGI program of Zyxel VMG3312-T20A firmware version 5.30(ABFX.5)C0 could allow a local authenticated attacker to execute arbitrary OS commands on a vulnerable device via a LAN interface.

• zyxel vmg3312-t20a firmware 5.30\(abfx.5\)c0 • zyxel emg3525-t50b firmware (< 5.50\(abpm.6\)c0) • zyxel emg5523-t50b firmware (< 5.50\(abpm.6\)c0) • zyxel emg5723-t50k firmware (< 5.50\(abom.7\)c0) • zyxel emg6726-b10a firmware (< 5.13\(abnp.7\)c0) • zyxel vmg1312-t20b firmware (< 5.50\(absb.5\)c0) • zyxel vmg3625-t50b firmware (< 5.50\(abpm.6\)c0) • zyxel vmg3927-b50a firmware (< 5.17\(abmt.6\)c0) • zyxel vmg3927-b50b firmware (< 5.13\(ably.7\)c0) • zyxel vmg3927-b60a firmware (< 5.17\(abmt.6\)c0) • zyxel vmg3927-t50k firmware (< 5.50\(abom.7\)c0) • zyxel vmg4927-b50a firmware (< 5.13\(ably.7\)c0) • zyxel vmg8623-t50b firmware (< 5.50\(abpm.6\)c0) • zyxel vmg8825-b50a firmware (< 5.17\(abmt.6\)c0) • zyxel vmg8825-b50b firmware (< 5.17\(abny.7\)c0) • zyxel vmg8825-t50k firmware (< 5.50\(abom.7\)c0) • zyxel vmg8825-b60a firmware (< 5.17\(abmt.6\)c0) • zyxel vmg8825-b60b firmware (< 5.17\(abny.7\)c0) • zyxel xmg3927-b50a firmware (< 5.17\(abmt.6\)c0) • zyxel xmg8825-b50a firmware (< 5.17\(abmt.6\)c0) • zyxel dx5401-b0 firmware (< 5.17\(abyo.1\)c0) • zyxel ex3510-b0 firmware (< 5.17\(abup.4\)c1) • zyxel ex5401-b0 firmware (< 5.17\(abyo.1\)c0) • zyxel ex5501-b0 firmware (< 5.17\(abry.2\)c0) • zyxel ax7501-b0 firmware (< 5.17\(abpc.1\)c0) • zyxel ep240p firmware (< 5.40\(abh.0\)c0) • zyxel pm7300-t0 firmware (< 5.42\(acbc.1\)c0) • zyxel pmg5317-t20b firmware (< 5.40\(abki.4\)c0) • zyxel pmg5617ga firmware (< 5.40\(abna.2\)c0) • zyxel pmg5617-t20b2 firmware (< 5.41\(acbb.1\)c0) • zyxel pmg5622ga firmware (< 5.40\(abnb.2\)c0) • zyxel px7501-b0 firmware (< 5.17\(abpc.1\)c0)