Vulnerability Description
A post-authentication command injection vulnerability in the ”zyUtilMailSend” function of the Zyxel AX7501-B1 firmware version V5.17(ABPC.5.3)C0 and earlier could allow an authenticated attacker with administrator privileges to execute operating system (OS) commands on a vulnerable device.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Zyxel | Wx5610-B0 Firmware | <= 5.18\(acgj.0.1\)c0 |
| Zyxel | Wx5610-B0 | - |
| Zyxel | Dx3300-T0 Firmware | <= 5.50\(abvy.5.4\)c0 |
| Zyxel | Dx3300-T0 | - |
| Zyxel | Dx3300-T1 Firmware | <= 5.50\(abvy.5.4\)c0 |
| Zyxel | Dx3300-T1 | - |
| Zyxel | Dx3301-T0 Firmware | <= 5.50\(abvy.5.4\)c0 |
| Zyxel | Dx3301-T0 | - |
| Zyxel | Dx4510-B0 Firmware | <= 5.17\(abyl.8\)c0 |
| Zyxel | Dx4510-B0 | - |
| Zyxel | Dx4510-B1 Firmware | <= 5.17\(abyl.8\)c0 |
| Zyxel | Dx4510-B1 | - |
| Zyxel | Dx5401-B0 Firmware | <= 5.17\(abyo.6.4\)c0 |
| Zyxel | Dx5401-B0 | - |
| Zyxel | Dx5401-B1 Firmware | <= 5.17\(abyo.6.4\)c0 |
| Zyxel | Dx5401-B1 | - |
| Zyxel | Ee6510-10 Firmware | <= 5.19\(acjq.1\)c1 |
| Zyxel | Ee6510-10 | - |
| Zyxel | Ex3300-T0 Firmware | <= 5.50\(abvy.5.4\)c0 |
| Zyxel | Ex3300-T0 | - |
Related Weaknesses (CWE)
References
FAQ
What is CVE-2024-12010?
CVE-2024-12010 is a vulnerability with a CVSS score of 7.2 (HIGH). A post-authentication command injection vulnerability in the ”zyUtilMailSend” function of the Zyxel AX7501-B1 firmware version V5.17(ABPC.5.3)C0 and earlier could allow an authenticated attacker with ...
How severe is CVE-2024-12010?
CVE-2024-12010 has been rated HIGH with a CVSS base score of 7.2/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2024-12010?
Check the references section above for vendor advisories and patch information. Affected products include: Zyxel Wx5610-B0 Firmware, Zyxel Wx5610-B0, Zyxel Dx3300-T0 Firmware, Zyxel Dx3300-T0, Zyxel Dx3300-T1 Firmware.