Reuven Yakar

**Name of the Vulnerable Software and Affected Versions** Zyxel NAS326 versions prior to V5.21(AAZF.13)C0 Zyxel NAS540 (affected versions not specified) Zyxel NAS542 (affected versions not specified) **Description** The issue is related to a command injection vulnerability. It may allow a remote attacker with administrator privileges to execute arbitrary operating system commands on an affected device by sending a specially crafted HTTP request. **Recommendations** For Zyxel NAS326 versions prior to V5.21(AAZF.13)C0, update to version V5.21(AAZF.13)C0 or later. For Zyxel NAS540 and Zyxel NAS542, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Belkin Smart Outlet V2 F7c063 firmware 2.00.11420.OWRT.PVT SNSV2 Wemo Mini Smart Plug V2 (F7C063) **Description** A stack-based buffer overflow in the ChangeFriendlyName() function allows attackers to cause a Denial of Service (DoS) via a crafted UPNP request. The issue is related to the function that permits changing the default assigned name, with a name length limited to 30 characters or less, but this rule is only applied by the application itself. Bypassing the character limit using a Python module named pyWeMo can lead to a buffer overflow state, which can then be used to crash the device or execute malicious commands. **Recommendations** For Belkin Smart Outlet V2 F7c063 firmware 2.00.11420.OWRT.PVT SNSV2, consider disabling the ChangeFriendlyName() function until a patch is available. For Wemo Mini Smart Plug V2 (F7C063), restrict access to the device from the internet and ensure network segmentation measures are in place to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.