CVE-2020-9054
ZY
Zyxel Multiple Network-Attached Storage (NAS) Devices
Zyxel Multiple NAS Devices OS Command Injection Vulnerability
What it is
Multiple Zyxel network-attached storage (NAS) devices contain a pre-authentication command injection vulnerability, which may allow a remote, unauthenticated attacker to execute arbitrary code.
What to do
Apply updates per vendor instructions.
Vendor notices and references
Description and required action as published by CISA. Full record at NVD.
Other Zyxel entries on the list
- GS1900 Series Switches Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability CVE-2026-7273 · Sep 21, 2026
- DSL CPE Devices Zyxel DSL CPE OS Command Injection Vulnerability CVE-2024-40891 · Feb 11, 2025
- DSL CPE Devices Zyxel DSL CPE OS Command Injection Vulnerability CVE-2024-40890 · Feb 11, 2025
- Multiple Firewalls Zyxel Multiple Firewalls Path Traversal Vulnerability CVE-2024-11667 · Dec 3, 2024
- EMG2926 Routers Zyxel EMG2926 Routers Command Injection Vulnerability CVE-2017-6884 · Sep 18, 2023
- P660HN-T1A Routers Zyxel P660HN-T1A Routers Command Injection Vulnerability CVE-2017-18368 · Aug 7, 2023