CVE-2022-34747

Summary

A format string vulnerability in Zyxel NAS326 firmware versions prior to V5.21(AAZF.12)C0 could allow an attacker to achieve unauthorized remote code execution via a crafted UDP packet.

Affected Software

Weaknesses

• CWE-134: CWE-134: Use of Externally-Controlled Format String

ADP Enrichment

CVE Program Container

Additional References

• https://www.zyxel.com/support/Zyxel-security-advisory-for-format-string-vulnerability-in-NAS.shtml

References

• https://www.zyxel.com/support/Zyxel-security-advisory-for-format-string-vulnerability-in-NAS.shtml

• ←Previous
• Next→