Zyxel Patches Critical OS Command Injection Flaw in Access Points and Routers
Zyxel Patches Critical OS Command Injection Flaw in Access Points and Routers
04 September 2024
Zyxel has released software updates to address a critical security flaw impacting certain access point (AP) and security router versions that could result in the execution of unauthorized commands.
Tracked as CVE-2024-7261 (CVSS score: 9.8), the vulnerability has been described as a case of operating system (OS) command injection.
"The improper neutralization of special elements in the