Known Exploited Vulnerabilities September 18, 2023 · CISA KEV Catalog

CVE-2017-6884: Zyxel EMG2926 Routers Command Injection Vulnerability

Zyxel EMG2926 routers contain a command injection vulnerability located in the diagnostic tools, specifically the nslookup function. A malicious user may exploit numerous vectors to execute malicious commands on the router, such as the ping_ip parameter to the expert/maintenance/diagnostic/nslookup URI.

Read the original at CISA KEV Catalog ↗

Topics

Vulnerabilities & Patching

Mentions

CVE-2017-6884Zyxel

Related

CVE-2026-7273: Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability Known Exploited Vulnerabilities · Sep 21, 2026

CVE-2024-40890: Zyxel DSL CPE OS Command Injection Vulnerability Known Exploited Vulnerabilities · Feb 11, 2025

CVE-2024-40891: Zyxel DSL CPE OS Command Injection Vulnerability Known Exploited Vulnerabilities · Feb 11, 2025