CVE-2024-7261

Zyxel Nwa1123acv3 Firmware vulnerability

9.8 CRITICALEPSS 11.4%

Published3 Sept 2024

Description

The improper neutralization of special elements in the parameter "host" in the CGI program of Zyxel NWA1123ACv3 firmware version 6.70(ABVT.4) and earlier, WAC500 firmware version 6.70(ABVS.4) and earlier, WAX655E firmware version 7.00(ACDO.1) and earlier, WBE530 firmware version 7.00(ACLE.1) and earlier, and USG LITE 60AX firmware version V2.00(ACIP.2) could allow an unauthenticated attacker to execute OS commands by sending a crafted cookie to a vulnerable device.

CVSS 3.1 breakdown

Attack vectorNetwork

Attack complexityLow

Privileges requiredNone

User interactionNone

ScopeUnchanged

ConfidentialityHigh

IntegrityHigh

AvailabilityHigh

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

Zyxel Nwa110ax Firmware< 7.00\(abtg.2\)

Zyxel Nwa1123-ac Pro Firmware< 6.28\(abhd.3\)

Zyxel Nwa1123acv3 Firmware< 6.70\(abvt.5\)

Zyxel Nwa130be Firmware< 7.00\(acil.2\)

Zyxel Nwa210ax Firmware< 7.00\(abtd.2\)

Zyxel Nwa220ax-6e Firmware< 7.00\(acco.2\)

Zyxel Nwa50ax Firmware< 7.00\(abyw.2\)

Zyxel Nwa50ax Pro Firmware< 7.00\(acge.2\)

Zyxel Nwa55axe Firmware< 7.00\(abzl.2\)

Zyxel Nwa90ax Firmware< 7.00\(accv.2\)

Zyxel Nwa90ax Pro Firmware< 7.00\(acgf.2\)

Zyxel Usg Lite 60ax Firmware< v2.00\(acip.3\)

Zyxel Wac500 Firmware< 6.70\(abvs.5\)

Zyxel Wac500h Firmware< 6.70\(abwa.5\)

Zyxel Wac6103d-i Firmware< 6.28\(aaxh.3\)

Zyxel Wac6502d-s Firmware< 6.28\(aase.3\)

Zyxel Wac6503d-s Firmware< 6.28\(aasf.3\)

Zyxel Wac6552d-s Firmware< 6.28\(abio.3\)

Zyxel Wac6553d-e Firmware< 6.28\(aasg.3\)

Zyxel Wax300h Firmware< 7.00\(achf.2\)

Zyxel Wax510d Firmware< 7.00\(abtf.2\)

Zyxel Wax610d Firmware< 7.00\(abte.2\)

Zyxel Wax620d-6e Firmware< 7.00\(accn.2\)

Zyxel Wax630s Firmware< 7.00\(abzd.2\)

Remediation

Fixed in

Zyxel Nwa110ax Firmware≥ 7.00\(abtg.2\)

Zyxel Nwa1123-ac Pro Firmware≥ 6.28\(abhd.3\)

Zyxel Nwa1123acv3 Firmware≥ 6.70\(abvt.5\)

Zyxel Nwa130be Firmware≥ 7.00\(acil.2\)

Zyxel Nwa210ax Firmware≥ 7.00\(abtd.2\)

Zyxel Nwa220ax-6e Firmware≥ 7.00\(acco.2\)

Zyxel Nwa50ax Firmware≥ 7.00\(abyw.2\)

Zyxel Nwa50ax Pro Firmware≥ 7.00\(acge.2\)

Zyxel Nwa55axe Firmware≥ 7.00\(abzl.2\)

Zyxel Nwa90ax Firmware≥ 7.00\(accv.2\)

Frequently asked

Is CVE-2024-7261 being actively exploited?

CVE-2024-7261 is not in the CISA KEV catalog. Its EPSS exploit probability is 11.4%.

How severe is CVE-2024-7261?

CVE-2024-7261 has a CVSS 3.1 base score of 9.8, rated critical. EPSS estimates a 11.4% probability of exploitation.

Which products are affected by CVE-2024-7261?

Affected products include Zyxel Nwa110ax Firmware, Zyxel Nwa1123-ac Pro Firmware, Zyxel Nwa1123acv3 Firmware, Zyxel Nwa130be Firmware, Zyxel Nwa210ax Firmware, and 19 more.

How do I fix CVE-2024-7261?

Upgrade affected software to a fixed version, for example Zyxel Nwa110ax Firmware 7.00\(abtg.2\), Zyxel Nwa1123-ac Pro Firmware 6.28\(abhd.3\), Zyxel Nwa1123acv3 Firmware 6.70\(abvt.5\) or later, then confirm no affected versions remain in your inventory.

How Secuno handles this

Secuno correlates vulnerabilities like CVE-2024-7261 against the real software inventory on every managed device, every day. Rather than a static severity, each match is scored in context: exploit availability, EPSS, the asset's exposure, and business criticality decide where it lands in the queue. If an affected version is present anywhere across your portfolio, it surfaces automatically with a prioritised remediation path.

See how prioritisation works Book a demo

Data from the NVD, CISA KEV catalog and FIRST EPSS. CVSS 3.1 base score shown where available.