CVE-2024-29972

CRITICAL EXPLOITED NUCLEI

Zyxel NAS326 <V5.21(AAZF.17)C0 - Command Injection

Title source: llm

Description

** UNSUPPORTED WHEN ASSIGNED ** The command injection vulnerability in the CGI program "remote_help-cgi" in Zyxel NAS326 firmware versions before V5.21(AAZF.17)C0 and NAS542 firmware versions before V5.21(ABAG.14)C0 could allow an unauthenticated attacker to execute some operating system (OS) commands by sending a crafted HTTP POST request.

Exploits (2)

nomisec WORKING POC 4 stars
by Pommaq · remote
https://github.com/Pommaq/CVE-2024-29972-CVE-2024-29976-CVE-2024-29973-CVE-2024-29975-CVE-2024-29974-poc
nomisec WORKING POC 1 stars
by WanLiChangChengWanLiChang · remote
https://github.com/WanLiChangChengWanLiChang/CVE-2024-29972

Nuclei Templates (1)

Zyxel NAS326 Firmware < V5.21(AAZF.17)C0 - NsaRescueAngel Backdoor Account
CRITICALVERIFIEDby gy741
FOFA: app="ZYXEL-NAS326"

References (2)

Scores

CVSS v3 9.8
EPSS 0.9268
EPSS Percentile 99.8%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

VulnCheck KEV 2025-06-07
CWE
CWE-78
Status published
Products (2)
zyxel/nas326_firmware < 5.21\(aazf.17\)c0
zyxel/nas542_firmware < 5.21\(abag.14\)c0
Published Jun 04, 2024
Tracked Since Feb 18, 2026