← Back

Nsa325 V2 Firmware

nsa325_v2_firmware

Vendor: Zyxel • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2018-14893
1Zyxel
1Nsa325 V2 Firmware
Nov 21, 2024
Nov 27, 2018
N/A· v4
8.8 HIGH· v3
9.0 HIGH· v2
A system command injection vulnerability in zyshclient in ZyXEL NSA325 V2 version 4.81 allows attackers to execute system commands via the web application API.
CVE-2018-14892
1Zyxel
1Nsa325 V2 Firmware
Nov 21, 2024
Nov 27, 2018
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
Missing protections against Cross-Site Request Forgery in the web application in ZyXEL NSA325 V2 version 4.81 allow attackers to perform state-changing actions via crafted HTTP forms.