Zyxel NWA110AX firmware buffer overflow lets LAN attacker escalate privileges
An attacker on your internal network could take admin control of a Zyxel wireless device.
Summary
A buffer overflow in the zdp_wtp binary of Zyxel NWA110AX firmware lets a LAN-based attacker escalate privileges on the device. Firmware versions through 7.12(ABTG.0)C0 are affected.
Affected when
- Attacker has LAN access
- NWA110AX firmware 7.12(ABTG.0)C0 and earlier
What to do
Update NWA110AX firmware to 7.12(ABTG.1)C0.
Update these devices now.
- Zyxel NWA110AX
Fixed in version 7.12(ABTG.1)C0.
Products and platforms
CVE IDs
Sources
- Advisory: zyxel.com (opens in a new tab)
- CVE record: cve.org (opens in a new tab)
- KISA notice: KISA 보호나라: Zyxel 제품 보안 업데이트 권고 (opens in a new tab)
Times
First published
First seen