CVE Catalog
CVE-2015-6018
CriticalSummary
The diagnostic-ping implementation on ZyXEL PMG5318-B20A devices with firmware before 1.00(AANC.2)C0 allows remote attackers to execute arbitrary commands via the PingIPAddr parameter.
Risk Assessment
Attackers can remotely take control of the device, potentially leading to serious security breaches within the organization's network.
Recommendation
It is recommended to update the firmware to version 1.00(AANC.2)C0 or later to mitigate this vulnerability.
Original NVD description (English source)
The diagnostic-ping implementation on ZyXEL PMG5318-B20A devices with firmware before 1.00(AANC.2)C0 allows remote attackers to execute arbitrary commands via the PingIPAddr parameter.