Skip to content
CVE PROGRAM SOURCE RECORD7.2 High

CVE-2024-12009

A post-authentication command injection vulnerability in the "ZyEE" function of the Zyxel EX5601-T1 firmware version V5.70(ACDZ.3.6)C0 and earlier could allow an authenticated atta

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Zyxel

Description

A post-authentication command injection vulnerability in the "ZyEE" function of the Zyxel EX5601-T1 firmware version V5.70(ACDZ.3.6)C0 and earlier could allow an authenticated attacker with administrator privileges to execute operating system (OS) commands on a vulnerable device.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Zyxel EX5601-T1 firmware

Default version status: unaffected

  • <= V5.70(ACDZ.3.6)C0affected

References