Business routers vulnerable to OS command injection attack

A number of enterprise router fashions, constructed by the Taiwanese networking large Zyxel, carried a crucial vulnerability which allowed malicious actors to run any command, remotely. The producer not too long ago launched a repair which addresses the flaw, so putting in it immediately is very advisable.

As the corporate defined in an advisory, the vulnerability is described as an “enter validation fault brought on by improper dealing with of user-supplied knowledge.” In different phrases, the underlying OS doesn’t validate the info a person inputs, doubtlessly permitting crooks to run OS command injection. The bug is tracked as CVE-2024-7261, and carries a severity rating of 9.8/10 – crucial.

“The improper neutralization of particular components within the parameter “host” within the CGI program of some AP and safety router variations might enable an unauthenticated attacker to execute OS instructions by sending a crafted cookie to a weak machine,” Zyxel stated within the advisory.

Quite a few gadgets affected

A number of Zyxel entry factors (AP) are weak to the flaw. The total listing is beneath:

NWA Sequence: NWA50AX, NWA50AX PRO, NWA55AXE, NWA90AX, NWA90AX PRO, NWA110AX, NWA130BE, NWA210AX, NWA220AX-6E | all variations as much as 7.00
NWA1123-AC PRO (all variations as much as 6.28)
NWA1123ACv3, WAC500, WAC500H (all variations as much as 6.70)
WAC Sequence: WAC6103D-I, WAC6502D-S, WAC6503D-S, WAC6552D-S, WAC6553D-E (all variations as much as 6.28)
WAX Sequence: WAX300H, WAX510D, WAX610D, WAX620D-6E, WAX630S, WAX640S-6E, WAX650S, WAX655E (all variations as much as 7.00)
WBE Sequence: WBE530, WBE660S (all variations as much as 7.00).

Safety router USG LITE 60AX working V2.00(ACIP.2) can also be weak, however this machine is mechanically patched, so customers ought to be protected. In any case, when you’re utilizing this mannequin make certain it’s working model V2.00(ACIP.3).

Zyxel is a well-liked producer of networking gadgets, with its routers, switches, and wi-fi entry factors being utilized by 1000’s of organizations worldwide. As such, it’s a standard goal amongst cybercriminals, who’re at all times on the hunt for a brand new vulnerability to use. Zyxel clients are suggested to use the patch as quickly as potential and thus safe their premises.

Through BleepingComputer