CVE-2024-11253

Summary

CVE-2024-11253 is a post-authentication command injection vulnerability affecting the Zyxel VMG8825-T50K routers running firmware version V5.50(ABOM.8.5)C0 and earlier. An authenticated attacker with administrator privileges can exploit this vulnerability in the "DNSServer” parameter of the diagnostic function to inject and execute OS commands on the affected device, potentially leading to significant security compromises. This issue poses a serious risk and requires immediate attention from device administrators to apply the necessary security patches.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.