{"id":"CVE-2024-29972","title":"** UNSUPPORTED WHEN ASSIGNED **\nThe command injection vulnerability in the CGI program \"remote_help-cgi\" in Zyxel NAS326 firmware versions before V5.21(AAZF.17)C0 and NAS542 firmware versions before V5.21(ABAG.14)C0 could allow an unauth…","summary":"** UNSUPPORTED WHEN ASSIGNED **\nThe command injection vulnerability in the CGI program \"remote_help-cgi\" in Zyxel NAS326 firmware versions before V5.21(AAZF.17)C0 and NAS542 firmware versions before V5.21(ABAG.14)C0 could allow an unauth…","severity":"critical","cvss":9.8,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-78"],"vendor":"zyxel","product":"nas326_firmware","affected":["nas326_firmware < 5.21\\(aazf.17\\)c0","nas542_firmware < 5.21\\(abag.14\\)c0"],"patched":["nas326_firmware 5.21\\(aazf.17\\)c0","nas542_firmware 5.21\\(abag.14\\)c0"],"published":"2024-06-04","updated":"2026-11-03","sourceUpdated":"2026-11-03T22:17:17.650","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2024-29972","references":[{"url":"https://outpost24.com/blog/zyxel-nas-critical-vulnerabilities/","label":"security@zyxel.com.tw"},{"url":"https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-multiple-vulnerabilities-in-nas-products-06-04-2024","label":"security@zyxel.com.tw"},{"url":"https://outpost24.com/blog/zyxel-nas-critical-vulnerabilities/","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-multiple-vulnerabilities-in-nas-products-06-04-2024","label":"af854a3a-2127-422b-91ae-364da2661108"}],"tags":["nvd","cve.org","exploit-available"],"exploitAvailable":true,"ssvc":{"exploitation":"poc","automatable":"yes","technicalImpact":"total","timestamp":"2024-06-26T03:55:25.594330Z"},"epss":0.90349,"epssPercentile":0.998,"exploits":{"github":2,"githubRepos":["https://github.com/WanLiChangChengWanLiChang/CVE-2024-29972","https://github.com/Pommaq/CVE-2024-29972-CVE-2024-29976-CVE-2024-29973-CVE-2024-29975-CVE-2024-29974-poc"],"nuclei":["CVE-2024-29972"],"checkedAt":"2026-11-05T06:38:49.868Z"},"ingestedAt":"2026-11-05T06:38:03.565Z","slug":"CVE-2024-29972","body":"## Overview\n\n** UNSUPPORTED WHEN ASSIGNED **\nThe command injection vulnerability in the CGI program \"remote_help-cgi\" in Zyxel NAS326 firmware versions before V5.21(AAZF.17)C0 and NAS542 firmware versions before V5.21(ABAG.14)C0 could allow an unauthenticated attacker to execute some operating system (OS) commands by sending a crafted HTTP POST request.\n\n## Affected\n\n- `nas326_firmware < 5.21\\(aazf.17\\)c0`\n- `nas542_firmware < 5.21\\(abag.14\\)c0`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `nas326_firmware 5.21\\(aazf.17\\)c0`\n- `nas542_firmware 5.21\\(abag.14\\)c0`","depth":"abyssal","depthScore":84,"depthScoreParts":{"impact":53.9,"likelihood":18.1,"exploitation":12,"ransomware":0},"changes":[]}