CVE-2024-12010

Name of the Vulnerable Software and Affected Versions Zyxel AX7501-B1 firmware versions prior to V5.17(ABPC.5.3)C0

Description A post-authentication command injection issue in the zyUtilMailSend function could allow an authenticated attacker with administrator privileges to execute operating system (OS) commands on a vulnerable device.

Recommendations For Zyxel AX7501-B1 firmware versions prior to V5.17(ABPC.5.3)C0, consider disabling the zyUtilMailSend function until a patch is available to prevent potential command injection attacks.