Dashboard / CVE-2024-29972

CVE-2024-29972

CRITICAL 2 PoCs
ACT NOW Priority: 8.85 BB Relevance: 100/100
Published: 2024-06-04 Modified: 2026-11-03 First seen: 2026-11-03 Status: active

Attack Surface

Network Low Complexity No Auth No Interaction Conf. Impact Integ. Impact

CVSS Vector Breakdown

AV: Network
AC: Low
PR: None
UI: None
S: Unchanged
C: High
I: High
A: High

Description

** UNSUPPORTED WHEN ASSIGNED ** The command injection vulnerability in the CGI program "remote_help-cgi" in Zyxel NAS326 firmware versions before V5.21(AAZF.17)C0 and NAS542 firmware versions before V5.21(ABAG.14)C0 could allow an unauthenticated attacker to execute some operating system (OS) commands by sending a crafted HTTP POST request.

Weakness Classification (1)

Affected Software (6)

VendorProductVersion
Zyxel NAS326 firmware < V5.21(AAZF.17)C0
Zyxel NAS326 firmware < V5.21(AAZF.17)C0
Zyxel NAS542 firmware < V5.21(ABAG.14)C0
Zyxel NAS542 firmware < V5.21(ABAG.14)C0
zyxel nas326_firmware < 5.21\(aazf.17\)c0
zyxel nas542_firmware < 5.21\(abag.14\)c0

References & Advisories (2)

Proof of Concept (2)

★ 4
https://github.com/Pommaq/CVE-2024-29972-CVE-2024-29976-CVE-2024-29973-CVE-2024-29975-CVE-2024-29974-poc
nomi-sec
★ 1
https://github.com/WanLiChangChengWanLiChang/CVE-2024-29972
nomi-sec

Bug Bounty Relevance

100 / 100
✓ Network accessible
✓ No authentication
✓ Low complexity
✓ No user interaction
✓ PoC available (2)
✓ High exploitation probability

CVSS Score

9.8 / 10.0 v3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS — Exploitation Probability

90.35%
Raw Score 0.903490
Percentile 99.8%
Date 2026-11-05

EPSS Trend

2026-11-05
0.90349
2026-11-04
0.90349
2026-11-03
0.90349

Intelligence Sources

mitre ref →
nvd ref →

External Links