CVE-2024-29974 | Zyxel NAS326/NAS542 prior 5.21 file_upload-cgi unrestricted upload

A vulnerability has been found in Zyxel NAS326 and NAS542 and classified as very critical. Affected by this vulnerability is an unknown functionality of the file file_upload-cgi. The manipulation leads to unrestricted upload. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

This vulnerability is known as CVE-2024-29974. The attack can be launched remotely. There is no exploit available.

It is recommended to upgrade the affected component.