Threats tagged 'ghsa-jvj8-73h8-vqf9'

A post-authentication command injection vulnerability exists in the "priv" parameter of Zyxel DX3300-T0 firmware version 5.50(ABVY.6.3)C0 and earlier. This flaw allows an authenticated attacker to execute arbitrary operating system commands on the affected device, potentially leading to full compromise. The vulnerability has a high severity score of 8.8 (CVSS 3.1) and impacts confidentiality, integrity, and availability. No patch or remediation information is provided in the available data.