Vulnerabilities > CVE-2020-13364 - Unspecified vulnerability in Zyxel products

CVSS 8.8 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

network

low complexity

zyxel

NVD

Published: 2020-08-06

Updated: 2024-11-21

Summary

A backdoor in certain Zyxel products allows remote TELNET access via a CGI script. This affects NAS520 V5.21(AASZ.4)C0, V5.21(AASZ.0)C0, V5.11(AASZ.3)C0, and V5.11(AASZ.0)C0; NAS542 V5.11(ABAG.0)C0, V5.20(ABAG.1)C0, and V5.21(ABAG.3)C0; NSA325 v2_V4.81(AALS.0)C0 and V4.81(AAAJ.1)C0; NSA310 4.22(AFK.0)C0 and 4.22(AFK.1)C0; NAS326 V5.21(AAZF.8)C0, V5.11(AAZF.4)C0, V5.11(AAZF.2)C0, and V5.11(AAZF.3)C0; NSA310S V4.75(AALH.2)C0; NSA320S V4.75(AANV.2)C0 and V4.75(AANV.1)C0; NSA221 V4.41(AFM.1)C0; and NAS540 V5.21(AATB.5)C0 and V5.21(AATB.3)C0.

Vulnerable Configurations

Part	Description	Count
OS	Zyxel Zyxel Nas326 Firmware - Zyxel Nas326 Firmware 5.21 Zyxel Nas326 Firmware 5.21\(Aazf.7\)C0 Zyxel Nas326 Firmware 5.21\(Aazf.12\)C0 Zyxel Nas326 Firmware 5.21\(Aazf.13\)C0 Zyxel Nas326 Firmware 5.21\(Aazf.14\)C0 Zyxel Nas326 Firmware 5.21\(Aazf.16\)C0 Zyxel Nas520 Firmware - Zyxel Nas520 Firmware 5.21\(Aasz.3\)C0 Zyxel Nas540 Firmware - Zyxel Nas540 Firmware 5.21\(Aatb.4\)C0 Zyxel Nas540 Firmware 5.21\(Aatb.9\)C0 Zyxel Nas540 Firmware 5.21\(Aatb.10\)C0 Zyxel Nas540 Firmware 5.21\(Aatb.11\)C0 Zyxel Nas542 Firmware - Zyxel Nas542 Firmware 5.21\(Abag.4\)C0 Zyxel Nas542 Firmware 5.21\(Abag.9\)C0 Zyxel Nas542 Firmware 5.21\(Abag.10\)C0 Zyxel Nas542 Firmware 5.21\(Abag.11\)C0 Zyxel Nas542 Firmware 5.21\(Abag.13\)C0	20
Hardware	Zyxel Zyxel Nas326 - Zyxel Nas520 - Zyxel Nas540 - Zyxel Nas542 -	4

Summary

Vulnerable Configurations

References