CVE-2020-9054Published
ZyXEL NAS products running firmware version 5.21 and earlier are vulnerable to pre-authentication command injection in weblogin.cgi
cve-program · CVE-2020-9054
PublishedNAS326
Vendor product
Original vendor version evidence · not evaluated as a NuGet range
{
"product": "NAS326",
"vendor": "ZyXEL",
"versions": [
{
"lessThanOrEqual": "V5.21(AAZF.7)C0",
"status": "affected",
"version": "V5.21(AAZF.7)C0",
"versionType": "custom"
}
]
}NAS520
Vendor product
Original vendor version evidence · not evaluated as a NuGet range
{
"product": "NAS520",
"vendor": "ZyXEL",
"versions": [
{
"lessThanOrEqual": "V5.21(AASZ.3)C0",
"status": "affected",
"version": "V5.21(AASZ.3)C0",
"versionType": "custom"
}
]
}NAS540
Vendor product
Original vendor version evidence · not evaluated as a NuGet range
{
"product": "NAS540",
"vendor": "ZyXEL",
"versions": [
{
"lessThanOrEqual": "V5.21(AATB.4)C0",
"status": "affected",
"version": "V5.21(AATB.4)C0",
"versionType": "custom"
}
]
}NAS542
Vendor product
Original vendor version evidence · not evaluated as a NuGet range
{
"product": "NAS542",
"vendor": "ZyXEL",
"versions": [
{
"lessThanOrEqual": "V5.21(ABAG.4)C0",
"status": "affected",
"version": "V5.21(ABAG.4)C0",
"versionType": "custom"
}
]
}NSA210
Vendor product
Original vendor version evidence · not evaluated as a NuGet range
{
"product": "NSA210",
"vendor": "ZyXEL",
"versions": [
{
"status": "affected",
"version": "all"
}
]
}NSA220
Vendor product
Original vendor version evidence · not evaluated as a NuGet range
{
"product": "NSA220",
"vendor": "ZyXEL",
"versions": [
{
"status": "affected",
"version": "all"
}
]
}NSA220+
Vendor product
Original vendor version evidence · not evaluated as a NuGet range
{
"product": "NSA220+",
"vendor": "ZyXEL",
"versions": [
{
"status": "affected",
"version": "all"
}
]
}NSA221
Vendor product
Original vendor version evidence · not evaluated as a NuGet range
{
"product": "NSA221",
"vendor": "ZyXEL",
"versions": [
{
"status": "affected",
"version": "all"
}
]
}NSA310
Vendor product
Original vendor version evidence · not evaluated as a NuGet range
{
"product": "NSA310",
"vendor": "ZyXEL",
"versions": [
{
"lessThanOrEqual": "V4.75(AALH.2)C0",
"status": "affected",
"version": "V4.75(AALH.2)C0",
"versionType": "custom"
}
]
}NSA320
Vendor product
Original vendor version evidence · not evaluated as a NuGet range
{
"product": "NSA320",
"vendor": "ZyXEL",
"versions": [
{
"status": "affected",
"version": "all"
}
]
}NSA320S
Vendor product
Original vendor version evidence · not evaluated as a NuGet range
{
"product": "NSA320S",
"vendor": "ZyXEL",
"versions": [
{
"lessThanOrEqual": "V4.75(AANV.2)C0",
"status": "affected",
"version": "V4.75(AANV.2)C0",
"versionType": "custom"
}
]
}NSA325
Vendor product
Original vendor version evidence · not evaluated as a NuGet range
{
"product": "NSA325",
"vendor": "ZyXEL",
"versions": [
{
"lessThanOrEqual": "V4.81(AAAJ.1)C0",
"status": "affected",
"version": "V4.81(AAAJ.1)C0",
"versionType": "custom"
}
]
}NSA325v2
Vendor product
Original vendor version evidence · not evaluated as a NuGet range
{
"product": "NSA325v2",
"vendor": "ZyXEL",
"versions": [
{
"lessThanOrEqual": "V4.81(AALS.1)C0",
"status": "affected",
"version": "V4.81(AALS.1)C0",
"versionType": "custom"
}
]
}Original source record · Cite this exact observation · Complete original publisher JSON