CVE-2021-4029 - Vulnerability Details - OpenCVE

A command injection vulnerability in the CGI program of the Zyxel ARMOR Z1/Z2 firmware could allow an attacker to execute arbitrary OS commands via a LAN interface.

No CVSS v4.0

Attack Vector Adjacent Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

Access Vector Adjacent Network

Access Complexity Low

Authentication None

Confidentiality Impact Complete

Integrity Impact Complete

Availability Impact Complete

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Zyxel	Nbg6816 Nbg6816 Firmware Nbg6817 Nbg6817 Firmware

Configuration 1 [-]

AND

cpe:2.3:o:zyxel:nbg6816_firmware:1.00\(aawb.10\)c0:*:*:*:*:*:*:*

cpe:2.3:h:zyxel:nbg6816:-:*:*:*:*:*:*:*

Configuration 2 [-]

AND

cpe:2.3:o:zyxel:nbg6817_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:zyxel:nbg6817:-:*:*:*:*:*:*:*

No data.

References

Link	Providers
https://www.zyxel.com/support/forgery-vulnerabilities-of-select-Armor-home-routers.shtml

History

No history.

MITRE

Status: PUBLISHED

Assigner: Zyxel

Published: 2022-02-22T14:25:14

Updated: 2024-08-03T17:16:03.566Z

Reserved: 2021-11-29T00:00:00

Link: CVE-2021-4029

Vulnrichment

No data.

NVD

Status : Modified

Published: 2022-02-24T15:15:25.150

Modified: 2024-11-21T06:36:45.207

Link: CVE-2021-4029

Redhat

No data.

{"containers": {"cna": {"affected": [{"product": "ARMOR Z2 (NBG6817) firmware", "vendor": "Zyxel", "versions": [{"status": "affected", "version": "1.00(ABCS.10)C0"}]}, {"product": "ARMOR Z1 (NBG6816) firmware", "vendor": "Zyxel", "versions": [{"status": "affected", "version": "1.00(AAWB.10)C0"}]}], "descriptions": [{"lang": "en", "value": "A command injection vulnerability in the CGI program of the Zyxel ARMOR Z1/Z2 firmware could allow an attacker to execute arbitrary OS commands via a LAN interface."}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}}], "problemTypes": [{"descriptions": [{"cweId": "CWE-78", "description": "CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"dateUpdated": "2022-02-22T14:25:14", "orgId": "96e50032-ad0d-4058-a115-4d2c13821f9f", "shortName": "Zyxel"}, "references": [{"tags": ["x_refsource_CONFIRM"], "url": "https://www.zyxel.com/support/forgery-vulnerabilities-of-select-Armor-home-routers.shtml"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "security@zyxel.com.tw", "ID": "CVE-2021-4029", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "ARMOR Z2 (NBG6817) firmware", "version": {"version_data": [{"version_value": "1.00(ABCS.10)C0"}]}}, {"product_name": "ARMOR Z1 (NBG6816) firmware", "version": {"version_data": [{"version_value": "1.00(AAWB.10)C0"}]}}]}, "vendor_name": "Zyxel"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "A command injection vulnerability in the CGI program of the Zyxel ARMOR Z1/Z2 firmware could allow an attacker to execute arbitrary OS commands via a LAN interface."}]}, "impact": {"cvss": {"baseScore": "8.8", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')"}]}]}, "references": {"reference_data": [{"name": "https://www.zyxel.com/support/forgery-vulnerabilities-of-select-Armor-home-routers.shtml", "refsource": "CONFIRM", "url": "https://www.zyxel.com/support/forgery-vulnerabilities-of-select-Armor-home-routers.shtml"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-03T17:16:03.566Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://www.zyxel.com/support/forgery-vulnerabilities-of-select-Armor-home-routers.shtml"}]}]}, "cveMetadata": {"assignerOrgId": "96e50032-ad0d-4058-a115-4d2c13821f9f", "assignerShortName": "Zyxel", "cveId": "CVE-2021-4029", "datePublished": "2022-02-22T14:25:14", "dateReserved": "2021-11-29T00:00:00", "dateUpdated": "2024-08-03T17:16:03.566Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:zyxel:nbg6816_firmware:1.00\\(aawb.10\\)c0:*:*:*:*:*:*:*", "matchCriteriaId": "51FE7589-8B85-40D9-A361-ECB2DC902D72", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:zyxel:nbg6816:-:*:*:*:*:*:*:*", "matchCriteriaId": "DEBACD2B-7C99-437F-B5C7-0EEA387DFE78", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:zyxel:nbg6817_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "7A4183C2-A488-4A80-AFDD-3CBC90D912D0", "versionEndExcluding": "1.00\\(abcs.11\\)c0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:zyxel:nbg6817:-:*:*:*:*:*:*:*", "matchCriteriaId": "1DB033C4-F082-46B1-985C-4FDFD62FFC70", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "descriptions": [{"lang": "en", "value": "A command injection vulnerability in the CGI program of the Zyxel ARMOR Z1/Z2 firmware could allow an attacker to execute arbitrary OS commands via a LAN interface."}, {"lang": "es", "value": "Una vulnerabilidad de inyecci\u00f3n de comandos en el programa CGI del firmware Zyxel ARMOR Z1/Z2 podr\u00eda permitir a un atacante ejecutar comandos arbitrarios del sistema operativo por medio de una interfaz LAN"}], "id": "CVE-2021-4029", "lastModified": "2024-11-21T06:36:45.207", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "ADJACENT_NETWORK", "authentication": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 8.3, "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "vectorString": "AV:A/AC:L/Au:N/C:C/I:C/A:C", "version": "2.0"}, "exploitabilityScore": 6.5, "impactScore": 10.0, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 5.9, "source": "security@zyxel.com.tw", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2022-02-24T15:15:25.150", "references": [{"source": "security@zyxel.com.tw", "tags": ["Vendor Advisory"], "url": "https://www.zyxel.com/support/forgery-vulnerabilities-of-select-Armor-home-routers.shtml"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://www.zyxel.com/support/forgery-vulnerabilities-of-select-Armor-home-routers.shtml"}], "sourceIdentifier": "security@zyxel.com.tw", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-78"}], "source": "security@zyxel.com.tw", "type": "Secondary"}, {"description": [{"lang": "en", "value": "CWE-78"}], "source": "nvd@nist.gov", "type": "Primary"}]}