8.8
CVSSv3

CVE-2019-10631

Published: 09/04/2019 Updated: 24/08/2020
CVSS v2 Base Score: 6.5 | Impact Score: 6.4 | Exploitability Score: 8
CVSS v3 Base Score: 8.8 | Impact Score: 5.9 | Exploitability Score: 2.8
VMScore: 578
Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P

Vulnerability Summary

Shell Metacharacter Injection in the package installer on Zyxel NAS 326 version 5.21 and below allows an authenticated malicious user to execute arbitrary code via multiple different requests.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

zyxel nas326_firmware