NBG6604 firmware vulnerabilities

2 known vulnerabilities in NBG6604 firmware from Zyxel. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  NBG6604 firmware: Improper Neutralization of Special Elements used in an OS Command

  CVE-2023-33013Aug 14, 2023ZyxelEPSS 1.68%

  A post-authentication command injection vulnerability in the NTP feature of Zyxel NBG6604 firmware version V1.01(ABIR.1)C0 could allow an authenticated attacker to execute some OS commands remotely by sending a crafted HTTP request.

• 8.8 High severity

  NBG6604 firmware: Improper Neutralization of Special Elements used in an OS Command

  CVE-2023-22919May 1, 2023ZyxelEPSS 1.59%

  The post-authentication command injection vulnerability in the Zyxel NBG6604 firmware version V1.01(ABIR.0)C0 could allow an authenticated attacker to execute some OS commands remotely by sending a crafted HTTP request.