CVE-2024-29972 | Zyxel NAS326/NAS542 prior 5.21 HTTP POST Request remote_help-cgi os command injection

A vulnerability, which was classified as very critical, was found in Zyxel NAS326 and NAS542. Affected is an unknown function of the file remote_help-cgi of the component HTTP POST Request Handler. The manipulation leads to os command injection. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

This vulnerability is traded as CVE-2024-29972. It is possible to launch the attack remotely. There is no exploit available.

It is recommended to upgrade the affected component.