OS Command Injection in ZyXEL Communications Corp. products - CVE-2022-26413

Vulnerability identifier: #VU62547

CSH Severity: Low

CVSS v4: 8.6 [CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2022-26413

CWE-ID: CWE-78

Exploitation vector: Adjecent network

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to execute arbitrary shell commands on the target system.

The vulnerability exists due to improper input validation in the CGI program. A remote user on the local network can pass specially crafted data to the application and execute arbitrary OS commands on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

PX7501-B0
EX5401-B0
DX5401-B0
EX3510-B0
XMG8825-B50A
XMG3927-B50A
VMG8825-B60A
VMG3927-B50A
VMG3927-B60A
VMG8825-B50A
VMG8825-B50B
VMG8825-B60B
VMG1312-T20B
EP240P
PMG5617-T20B2
PM7300-T0
VMG8623-T50B
VMG3625-T50B
EMG5723-T50K
VMG3927-T50K
VMG8825-T50K
VMG3312-T20A
VMG3927-B50B
VMG4927-B50A
EMG6726-B10A
EMG3525-T50B
EMG5523-T50B
AX7501-B0
EX5501-B0
PMG5617GA
PMG5622GA
PMG5317-T20B

Install updates from vendor's website.

PX7501-B0 - update to V5.17(ABPC.1)C0
AX7501-B0 - update to V5.17(ABPC.1)C0
EX5401-B0 - update to V5.17(ABYO.1)C0
DX5401-B0 - update to V5.17(ABYO.1)C0
EX5501-B0 - update to V5.17(ABRY.2)C0
EX3510-B0 - update to V5.17(ABUP.4)C1
XMG8825-B50A - update to V5.17(ABMT.6)C0
XMG3927-B50A - update to V5.17(ABMT.6)C0
VMG8825-B60A - update to V5.17(ABMT.6)C0
VMG3927-B50A - update to V5.17(ABMT.6)C0
VMG3927-B60A - update to V5.17(ABMT.6)C0
VMG8825-B50A - update to V5.17(ABMT.6)C0
VMG8825-B50B - update to V5.17(ABNY.7)C0
VMG8825-B60B - update to V5.17(ABNY.7)C0
VMG1312-T20B - update to V5.30(ABSB.5)C0
EP240P - update to V5.40(ABVH.0)C0
PMG5617GA - update to V5.40(ABNA.2)C0
PMG5622GA - update to V5.40(ABNB.2)C0
PMG5317-T20B - update to V5.40(ABKI.4)C0
PMG5617-T20B2 - update to V5.41(ACBB.1)C0
PM7300-T0 - update to V5.42(ACBC.1)C0
VMG8623-T50B - update to V5.50(ABPM.6)C0
VMG3625-T50B - update to V5.50(ABPM.6)C0
EMG5723-T50K - update to V5.50(ABOM.7)C0
VMG3927-T50K - update to V5.50(ABOM.7)C0
VMG8825-T50K - update to V5.50(ABOM.7)C0
VMG3927-B50B - update to V5.13(ABLY.7)C0
VMG4927-B50A - update to V5.13(ABLY.7)C0
EMG6726-B10A - update to V5.13(ABNP.7)C0
EMG3525-T50B - addressed in versions V5.50(ABSL.0)B12, V5.50(ABPM.6)C0
EMG5523-T50B - addressed in versions V5.50(ABSL.0)B12, V5.50(ABPM.6)C0

• https://www.zyxel.com/support/OS-command-injection-and-buffer-overflow-vulnerabilities-of-CPE-and-ONTs.shtml

• Multiple vulnerabilities in Zyxel devices
• Multiple vulnerabilities in Zyxel devices
• Multiple vulnerabilities in Zyxel VMG3312-T20A