CVE-2024-29976
published 2024-06-04CVE-2024-29976: ** UNSUPPORTED WHEN ASSIGNED ** The improper privilege management vulnerability in the command “show_allsessions” in Zyxel NAS326 firmware versions before…
PriorityP343medium6.5CVSS 3.1
AVNACLPRLUINSUCHINAN
EPSS
8.95%
94.7th percentile
** UNSUPPORTED WHEN ASSIGNED ** The improper privilege management vulnerability in the command “show_allsessions” in Zyxel NAS326 firmware versions before V5.21(AAZF.17)C0 and NAS542 firmware versions before V5.21(ABAG.14)C0 could allow an authenticated attacker to obtain a logged-in administrator’s session information containing cookies on an affected device.
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| zyxel | nas326_firmware | < V5.21(AAZF.17)C0 | V5.21(AAZF.17)C0 |
| zyxel | nas326_firmware | < 5.21\(aazf.17\)c0 | 5.21\(aazf.17\)c0 |
| zyxel | nas542_firmware | < V5.21(ABAG.14)C0 | V5.21(ABAG.14)C0 |
| zyxel | nas542_firmware | < 5.21\(abag.14\)c0 | 5.21\(abag.14\)c0 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Suricata
ET WEB_SPECIFIC_APPS Zyxel NAS Privilege Escalation and Information Disclosure (CVE-2024-29976)
suricata·2024-09-18·CVSS 6.5
CVE-2024-29976 [MEDIUM] ET WEB_SPECIFIC_APPS Zyxel NAS Privilege Escalation and Information Disclosure (CVE-2024-29976)
ET WEB_SPECIFIC_APPS Zyxel NAS Privilege Escalation and Information Disclosure (CVE-2024-29976)
Rule: alert http any any -> $HOME_NET any (msg:"ET WEB_SPECIFIC_APPS Zyxel NAS Privilege Escalation and Information Disclosure (CVE-2024-29976)"; flow:established,to_server; http.method; content:"GET"; http.uri; content:"/cmd|2c|"; startswith; content:"/system_main/show_allsessions"; fast_pattern; endswith; reference:url,outpost24.com/blog/zyxel-nas-critical-vulnerabilities/; reference:cve,2024-29976; classtype:web-application-activity; sid:2055917; rev:1; metadata:affected_product Zyxel, attack_target Server, tls_state plaintext, created_at 2024_09_18, cve CVE_2024_29976, deployment Perimeter, deployment Internal, confidence High, signature_severity Major, tag Exploit, updated_at 2024_09_18, m
No public exploits indexed.
https://outpost24.com/blog/zyxel-nas-critical-vulnerabilities/https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-multiple-vulnerabilities-in-nas-products-06-04-2024https://outpost24.com/blog/zyxel-nas-critical-vulnerabilities/https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-multiple-vulnerabilities-in-nas-products-06-04-2024
2024-06-04
Published