CVE-2024-29973

Published Jun 3, 2024·Updated Jun 17, 2026

NVD Description

** UNSUPPORTED WHEN ASSIGNED ** The command injection vulnerability in the “setCookie” parameter in Zyxel NAS326 firmware versions before V5.21(AAZF.17)C0 and NAS542 firmware versions before V5.21(ABAG.14)C0 could allow an unauthenticated attacker to execute some operating system (OS) commands by sending a crafted HTTP POST request.

Public Exploits & PoCs3 found

PoC: CVE-2024-29973

Exploiter a Vulnerability detection and Exploitation tool for CVE-2024-29973 with Asychronous Performance.

PoC: CVE-2024-29973

PoC and Bulk Scanner for CVE-2024-29973

PoC: CVE-2024-29973

POC for CVE-2024-29973

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

View on NVD Search GitHub Search Google

Get alerted for CVEs like this

Start monitoring free