Skip to content
CVE PROGRAM SOURCE RECORD7.2 High

CVE-2024-12010

A post-authentication command injection vulnerability in the ”zyUtilMailSend” function of the Zyxel AX7501-B1 firmware version V5.17(ABPC.5.3)C0 and earlier could allow an authenti

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Zyxel

Description

A post-authentication command injection vulnerability in the ”zyUtilMailSend” function of the Zyxel AX7501-B1 firmware version V5.17(ABPC.5.3)C0 and earlier could allow an authenticated attacker with administrator privileges to execute operating system (OS) commands on a vulnerable device.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Zyxel AX7501-B1 firmware

Default version status: unaffected

  • <=  V5.17(ABPC.5.3)C0affected

References