Vendor/product archive

zyxel / nas520_firmware CVEs

Beta · best-effort

3 CVEs tagged to zyxel / nas520_firmware — 1 Critical, 2 High, 0 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to zyxel vendor archive

CVE-2020-13365

Published Aug 6, 2020

Certain Zyxel products have a locally accessible binary that allows a non-root user to generate a password for an undocumented user account that can be used for a TELNET session a…

CVSS 8.8 · High

Vendor/product tagsBeta · best-effort

CVE-2020-13364

Published Aug 6, 2020

A backdoor in certain Zyxel products allows remote TELNET access via a CGI script. This affects NAS520 V5.21(AASZ.4)C0, V5.21(AASZ.0)C0, V5.11(AASZ.3)C0, and V5.11(AASZ.0)C0; NAS5…

CVSS 8.8 · High

Vendor/product tagsBeta · best-effort

CVE-2020-9054

Published Mar 4, 2020

Multiple ZyXEL network-attached storage (NAS) devices running firmware version 5.21 contain a pre-authentication command injection vulnerability, which may allow a remote, unauthe…

CVSS 9.8 · Critical

evidence mentions: 12
Buzz score: 65.2

KEV listed

Vendor/product tagsBeta · best-effort

Showing 1-3 of 3 CVEsPage 1 of 1