CVE-2020-9054 Zyxel Multiple Network-Attached Storage (NAS) Devices
Multiple Zyxel network-attached storage (NAS) devices contain a pre-authentication command injection vulnerability, which may allow a remote, unauthenticated attacker to execute arbitrary code.
- CVSS
- not scored
On CISA’s exploited list
Zyxel Multiple NAS Devices OS Command Injection Vulnerability
- Added
- 2022-03-25
- Federal patch deadline
- 2022-04-15
- Ransomware use
- not known