Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2022-26413 Details

Description

A command injection vulnerability in the CGI program of Zyxel VMG3312-T20A firmware version 5.30(ABFX.5)C0 could allow a local authenticated attacker to execute arbitrary OS commands on a vulnerable device via a LAN interface.

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:8 HIGHVector:CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CNA: [email protected]CVSS-B:8 HIGHVector:CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://www.zyxel.com/support/OS-command-injection-and-buffer-overflow-vulnerabilities-of-CPE-and-ONTs.shtml	CVE	Vendor Advisory
https://www.zyxel.com/support/OS-command-injection-and-buffer-overflow-vulnerabilities-of-CPE-and-ONTs.shtml	[email protected]	Vendor Advisory

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-78	Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')	[email protected]
CWE-78	Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')	[email protected]

Affected Products

Product	Versions
zyxel vmg3312-t20a firmware	5.30(abfx.5)c0
CPE cpe:2.3:o:zyxel:vmg3312-t20a_firmware:5.30(abfx.5)c0:::::::* Remediation No remediation found in references.
zyxel vmg3312-t20a	All versions
CPE cpe:2.3:h:zyxel:vmg3312-t20a:-:::::::* Remediation No remediation found in references.
zyxel emg3525-t50b firmware	< 5.50\(abpm.6\)c0
CPE cpe:2.3:o:zyxel:emg3525-t50b_firmware:::::america:::* cpe:2.3:o:zyxel:emg3525-t50b_firmware:::::emea:::* Remediation No remediation found in references.
zyxel emg3525-t50b	All versions
CPE cpe:2.3:h:zyxel:emg3525-t50b:-:::::::* Remediation No remediation found in references.
zyxel emg5523-t50b firmware	< 5.50\(abpm.6\)c0
CPE cpe:2.3:o:zyxel:emg5523-t50b_firmware:::::america:::* cpe:2.3:o:zyxel:emg5523-t50b_firmware:::::emea:::* Remediation No remediation found in references.
zyxel emg5523-t50b	All versions
CPE cpe:2.3:h:zyxel:emg5523-t50b:-:::::::* Remediation No remediation found in references.
zyxel emg5723-t50k firmware	< 5.50\(abom.7\)c0
CPE cpe:2.3:o:zyxel:emg5723-t50k_firmware:::::::: Remediation No remediation found in references.
zyxel emg5723-t50k	All versions
CPE cpe:2.3:h:zyxel:emg5723-t50k:-:::::::* Remediation No remediation found in references.
zyxel emg6726-b10a firmware	< 5.13\(abnp.7\)c0
CPE cpe:2.3:o:zyxel:emg6726-b10a_firmware:::::::: Remediation No remediation found in references.
zyxel emg6726-b10a	All versions
CPE cpe:2.3:h:zyxel:emg6726-b10a:-:::::::* Remediation No remediation found in references.
zyxel vmg1312-t20b firmware	< 5.50\(absb.5\)c0
CPE cpe:2.3:o:zyxel:vmg1312-t20b_firmware:::::::: Remediation No remediation found in references.
zyxel vmg1312-t20b	All versions
CPE cpe:2.3:h:zyxel:vmg1312-t20b:-:::::::* Remediation No remediation found in references.
zyxel vmg3625-t50b firmware	< 5.50\(abpm.6\)c0
CPE cpe:2.3:o:zyxel:vmg3625-t50b_firmware:::::::: Remediation No remediation found in references.
zyxel vmg3625-t50b	All versions
CPE cpe:2.3:h:zyxel:vmg3625-t50b:-:::::::* Remediation No remediation found in references.
zyxel vmg3927-b50a firmware	< 5.17\(abmt.6\)c0
CPE cpe:2.3:o:zyxel:vmg3927-b50a_firmware:::::::: Remediation No remediation found in references.
zyxel vmg3927-b50a	All versions
CPE cpe:2.3:h:zyxel:vmg3927-b50a:-:::::::* Remediation No remediation found in references.
zyxel vmg3927-b50b firmware	< 5.13\(ably.7\)c0
CPE cpe:2.3:o:zyxel:vmg3927-b50b_firmware:::::::: Remediation No remediation found in references.
zyxel vmg3927-b50b	All versions
CPE cpe:2.3:h:zyxel:vmg3927-b50b:-:::::::* Remediation No remediation found in references.
zyxel vmg3927-b60a firmware	< 5.17\(abmt.6\)c0
CPE cpe:2.3:o:zyxel:vmg3927-b60a_firmware:::::::: Remediation No remediation found in references.
zyxel vmg3927-b60a	All versions
CPE cpe:2.3:h:zyxel:vmg3927-b60a:-:::::::* Remediation No remediation found in references.
zyxel vmg3927-t50k firmware	< 5.50\(abom.7\)c0
CPE cpe:2.3:o:zyxel:vmg3927-t50k_firmware:::::::: Remediation No remediation found in references.
zyxel vmg3927-t50k	All versions
CPE cpe:2.3:h:zyxel:vmg3927-t50k:-:::::::* Remediation No remediation found in references.
zyxel vmg4927-b50a firmware	< 5.13\(ably.7\)c0
CPE cpe:2.3:o:zyxel:vmg4927-b50a_firmware:::::::: Remediation No remediation found in references.
zyxel vmg4927-b50a	All versions
CPE cpe:2.3:h:zyxel:vmg4927-b50a:-:::::::* Remediation No remediation found in references.
zyxel vmg8623-t50b firmware	< 5.50\(abpm.6\)c0
CPE cpe:2.3:o:zyxel:vmg8623-t50b_firmware:::::::: Remediation No remediation found in references.
zyxel vmg8623-t50b	All versions
CPE cpe:2.3:h:zyxel:vmg8623-t50b:-:::::::* Remediation No remediation found in references.
zyxel vmg8825-b50a firmware	< 5.17\(abmt.6\)c0
CPE cpe:2.3:o:zyxel:vmg8825-b50a_firmware:::::::: Remediation No remediation found in references.
zyxel vmg8825-b50a	All versions
CPE cpe:2.3:h:zyxel:vmg8825-b50a:-:::::::* Remediation No remediation found in references.
zyxel vmg8825-b50b firmware	< 5.17\(abny.7\)c0
CPE cpe:2.3:o:zyxel:vmg8825-b50b_firmware:::::::: Remediation No remediation found in references.
zyxel vmg8825-b50b	All versions
CPE cpe:2.3:h:zyxel:vmg8825-b50b:-:::::::* Remediation No remediation found in references.
zyxel vmg8825-t50k firmware	< 5.50\(abom.7\)c0
CPE cpe:2.3:o:zyxel:vmg8825-t50k_firmware:::::::: Remediation No remediation found in references.
zyxel vmg8825-t50k	All versions
CPE cpe:2.3:h:zyxel:vmg8825-t50k:-:::::::* Remediation No remediation found in references.
zyxel vmg8825-b60a firmware	< 5.17\(abmt.6\)c0
CPE cpe:2.3:o:zyxel:vmg8825-b60a_firmware:::::::: Remediation No remediation found in references.
zyxel vmg8825-b60a	All versions
CPE cpe:2.3:h:zyxel:vmg8825-b60a:-:::::::* Remediation No remediation found in references.
zyxel vmg8825-b60b firmware	< 5.17\(abny.7\)c0
CPE cpe:2.3:o:zyxel:vmg8825-b60b_firmware:::::::: Remediation No remediation found in references.
zyxel vmg8825-b60b	All versions
CPE cpe:2.3:h:zyxel:vmg8825-b60b:-:::::::* Remediation No remediation found in references.
zyxel xmg3927-b50a firmware	< 5.17\(abmt.6\)c0
CPE cpe:2.3:o:zyxel:xmg3927-b50a_firmware:::::::: Remediation No remediation found in references.
zyxel xmg3927-b50a	All versions
CPE cpe:2.3:h:zyxel:xmg3927-b50a:-:::::::* Remediation No remediation found in references.
zyxel xmg8825-b50a firmware	< 5.17\(abmt.6\)c0
CPE cpe:2.3:o:zyxel:xmg8825-b50a_firmware:::::::: Remediation No remediation found in references.
zyxel xmg8825-b50a	All versions
CPE cpe:2.3:h:zyxel:xmg8825-b50a:-:::::::* Remediation No remediation found in references.
zyxel dx5401-b0 firmware	< 5.17\(abyo.1\)c0
CPE cpe:2.3:o:zyxel:dx5401-b0_firmware:::::::: Remediation No remediation found in references.
zyxel dx5401-b0	All versions
CPE cpe:2.3:h:zyxel:dx5401-b0:-:::::::* Remediation No remediation found in references.
zyxel ex3510-b0 firmware	< 5.17\(abup.4\)c1
CPE cpe:2.3:o:zyxel:ex3510-b0_firmware:::::::: Remediation No remediation found in references.
zyxel ex3510-b0	All versions
CPE cpe:2.3:h:zyxel:ex3510-b0:-:::::::* Remediation No remediation found in references.
zyxel ex5401-b0 firmware	< 5.17\(abyo.1\)c0
CPE cpe:2.3:o:zyxel:ex5401-b0_firmware:::::::: Remediation No remediation found in references.
zyxel ex5401-b0	All versions
CPE cpe:2.3:h:zyxel:ex5401-b0:-:::::::* Remediation No remediation found in references.
zyxel ex5501-b0 firmware	< 5.17\(abry.2\)c0
CPE cpe:2.3:o:zyxel:ex5501-b0_firmware:::::::: Remediation No remediation found in references.
zyxel ex5501-b0	All versions
CPE cpe:2.3:h:zyxel:ex5501-b0:-:::::::* Remediation No remediation found in references.
zyxel ax7501-b0 firmware	< 5.17\(abpc.1\)c0
CPE cpe:2.3:o:zyxel:ax7501-b0_firmware:::::::: Remediation No remediation found in references.
zyxel ax7501-b0	All versions
CPE cpe:2.3:h:zyxel:ax7501-b0:-:::::::* Remediation No remediation found in references.
zyxel ep240p firmware	< 5.40\(abh.0\)c0
CPE cpe:2.3:o:zyxel:ep240p_firmware:::::::: Remediation No remediation found in references.
zyxel ep240p	All versions
CPE cpe:2.3:h:zyxel:ep240p:-:::::::* Remediation No remediation found in references.
zyxel pm7300-t0 firmware	< 5.42\(acbc.1\)c0
CPE cpe:2.3:o:zyxel:pm7300-t0_firmware:::::::: Remediation No remediation found in references.
zyxel pm7300-t0	All versions
CPE cpe:2.3:h:zyxel:pm7300-t0:-:::::::* Remediation No remediation found in references.
zyxel pmg5317-t20b firmware	< 5.40\(abki.4\)c0
CPE cpe:2.3:o:zyxel:pmg5317-t20b_firmware:::::::: Remediation No remediation found in references.
zyxel pmg5317-t20b	All versions
CPE cpe:2.3:h:zyxel:pmg5317-t20b:-:::::::* Remediation No remediation found in references.
zyxel pmg5617ga firmware	< 5.40\(abna.2\)c0
CPE cpe:2.3:o:zyxel:pmg5617ga_firmware:::::::: Remediation No remediation found in references.
zyxel pmg5617ga	All versions
CPE cpe:2.3:h:zyxel:pmg5617ga:-:::::::* Remediation No remediation found in references.
zyxel pmg5617-t20b2 firmware	< 5.41\(acbb.1\)c0
CPE cpe:2.3:o:zyxel:pmg5617-t20b2_firmware:::::::: Remediation No remediation found in references.
zyxel pmg5617-t20b2	All versions
CPE cpe:2.3:h:zyxel:pmg5617-t20b2:-:::::::* Remediation No remediation found in references.
zyxel pmg5622ga firmware	< 5.40\(abnb.2\)c0
CPE cpe:2.3:o:zyxel:pmg5622ga_firmware:::::::: Remediation No remediation found in references.
zyxel pmg5622ga	All versions
CPE cpe:2.3:h:zyxel:pmg5622ga:-:::::::* Remediation No remediation found in references.
zyxel px7501-b0 firmware	< 5.17\(abpc.1\)c0
CPE cpe:2.3:o:zyxel:px7501-b0_firmware:::::::: Remediation No remediation found in references.
zyxel px7501-b0	All versions
CPE cpe:2.3:h:zyxel:px7501-b0:-:::::::* Remediation No remediation found in references.

Change History

4 change records found show changes

Date	Action	Recorded By
Jun 17, 2026	CVE Modified	[email protected]
Nov 21, 2024	CVE Modified	CVE
May 14, 2024	CVE Modified	[email protected]
Apr 15, 2022	Initial Analysis	[email protected]

CVE-2022-26413 Details

Description

Metrics

References to Advisories, Solutions, and Tools

Weakness Enumeration

Affected Products

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation