VULNERABILITY INTELLIGENCE

CVE-2024-29975

CVSS score6.7 MEDIUM
EPSS probability0.47%
CISA KEVNot currently listed
Published2024-06-04
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Description

** UNSUPPORTED WHEN ASSIGNED ** The improper privilege management vulnerability in the SUID executable binary in Zyxel NAS326 firmware versions before V5.21(AAZF.17)C0 and NAS542 firmware versions before V5.21(ABAG.14)C0 could allow an authenticated local attacker with administrator privileges to execute some system commands as the “root” user on a vulnerable device.

Weakness classification

  • security@zyxel.com.tw: CWE-269
  • nvd@nist.gov: NVD-CWE-noinfo

Primary references