Back to directory
WRITEUP #676

CVE-2023-4473 & CVE-2023-4474 - Authentication bypass and multiple blind OS command injection vulnerabilities in Zyxel’s NAS326 devices

Auth BypassAuthentication bypassOS command injectionRCESecurity code review
by@GaborSeljan(Gábor Selján)
Program
Zyxel
Published
Nov 30, 2023
Added to HackDex
Feb 1, 2024
Read Full Writeuphttps://bugprove.com/knowledge-hub/cve-2023-4473-and-cve-2023-4474-authentication-bypass-and-multiple-blind-os-command-injection-vulnerabilities-in-zyxel-s-nas-326-devices/
▸ RELATED WRITEUPS
Vulnerabilities in Open Source C2 Frameworks
RCEOS command injection
Getting code execution on Veeam through CVE-2023-27532
RCEInsecure deserialization
Spip Preauth RCE 2024: Part 2, A Big Upload
RCEFile upload
Back To School - Exploiting A Remote Code Execution Vulnerability In Moodle
RCESecurity code review
WordPress GiveWP POP to RCE (CVE-2024-5932)
RCEPHP pop chain

Built with ❤️ by Shubham Rawat