Vulnerabilities > Zyxel > Vmg3927 B50A Firmware

DATE CVE VULNERABILITY TITLE RISK
2022-04-11 CVE-2022-26413 OS Command Injection vulnerability in Zyxel products
A command injection vulnerability in the CGI program of Zyxel VMG3312-T20A firmware version 5.30(ABFX.5)C0 could allow a local authenticated attacker to execute arbitrary OS commands on a vulnerable device via a LAN interface.
low complexity
zyxel CWE-78
8.0
2022-04-11 CVE-2022-26414 Classic Buffer Overflow vulnerability in Zyxel products
A potential buffer overflow vulnerability was identified in some internal functions of Zyxel VMG3312-T20A firmware version 5.30(ABFX.5)C0, which could be exploited by a local authenticated attacker to cause a denial of service.
local
low complexity
zyxel CWE-120
5.5