Known vulnerabilities in Zyxel NAS 326

Vendor: ZyXEL Communications Corp.
Software: Zyxel NAS 326
Software CPE: cpe:2.3:h:zyxel_communications_corp:zyxel_nas_326:*:*:*:*:*:*:*:*
Website: https://www.zyxel.com/
Total vulnerabilities: 4
Public exploits: 1
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Zyxel NAS 326 Zyxel NAS 326 is affected by 4 known vulnerabilities: 1 high, 3 medium Critical High Medium Low

Vulnerabilities (4)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU34062 - Improper Access Control
CVE-2020-13365		 CWE-284 Medium
No
No
 V5.21(AAZF.9)C0 05.08.2020 SB2020080510
#VU34061 - Improper Access Control
CVE-2020-13364		 CWE-284 Medium
No
No
 V5.21(AAZF.9)C0 05.08.2020 SB2020080510
#VU25597 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2020-9054		 CWE-78 High
Available
Exploited
 - 25.02.2020 SB2020022520
#VU18239 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-10634		 CWE-79 Medium
No
No
 - 11.04.2019 SB2019040918