CVE-2017-15226

Critical

Published: 10/10/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

Zyxel NBG6716 devices version V1.00(AAKG.9)C0 allow command injection in the ozkerz component due to the direct use of beginIndex and endIndex parameters in a popen call.

Risk Assessment

An attacker can exploit this vulnerability to execute arbitrary system commands, potentially leading to device takeover.

Recommendation

It is recommended to update the device firmware to the latest version to mitigate this vulnerability and restrict access to the administrative interface.

Original NVD description (English source)

Zyxel NBG6716 V1.00(AAKG.9)C0 devices allow command injection in the ozkerz component because beginIndex and endIndex are used directly in a popen call.