CVE-2019-10633

An eval injection vulnerability in the Python web server routing on the Zyxel NAS 326 version 5.21 and below allows a remote authenticated attacker to execute…

published April 9, 2019

CVSS
—
EPSS
3%
Percentile
88.2
In the wild
Unconfirmed
What it is

An eval injection vulnerability in the Python web server routing on the Zyxel NAS 326 version 5.21 and below allows a remote authenticated attacker to execute arbitrary code via the tjp6jp6y4, simZysh, and ck6fup6 APIs.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03236 · 88.2th percentile
Published
2019-04-09T05:00Z
EPSS history
Timeline
  • 09 APR 05:00Z
    An eval injection vulnerability in the Python web server routing on the Zyxel NAS 326 version 5.21 and below allows a remote authenticated attacker to execute…
    cvelistv5