CVE-2024-29976
EUVD-2024-2695004.06.2024, 02:15
** UNSUPPORTED WHEN ASSIGNED ** The improper privilege management vulnerability in the command “show_allsessions” in Zyxel NAS326 firmware versions before V5.21(AAZF.17)C0 and NAS542 firmware versions before V5.21(ABAG.14)C0 could allow an authenticated attacker to obtain a logged-in administrator’s session information containing cookies on an affected device.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| zyxel | nas326_firmware | 𝑥 < 5.21\(aazf.17\)c0 |
| zyxel | nas542_firmware | 𝑥 < 5.21\(abag.14\)c0 |
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
| Vendor | Product | Version | Source |
|---|---|---|---|
| zyxel | nas326_firmware | 𝑥 ≤ 5.21(aazf.16)c0 | ADP |
| zyxel | nas542_firmware | 𝑥 ≤ 5.21(abag.13)c0 | ADP |
Common Weakness Enumeration
References