What’s Vulnerable › Vulnerabilities
CVE-2014-0356
- Severity: high (CVSS 7.9 v2.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 1.1% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2014-04-15 · updated 2026-06-17
- Weakness: CWE-78
Description
The ZyXEL Wireless N300 NetUSB NBG-419N router with firmware 1.00(BFQ.6)C0 allows remote attackers to execute arbitrary code via shell metacharacters in input to the (1) detectWeather, (2) set_language, (3) SystemCommand, or (4) NTPSyncWithHost function in management.c, or a (5) SET COUNTRY, (6) SET WLAN SSID, (7) SET WLAN CHANNEL, (8) SET WLAN STATUS, or (9) SET WLAN COUNTRY udps command.
Affected products
- Zyxel N300 Netusb Nbg-419N: all versions
- Zyxel N300 Netusb Nbg-419N Firmware: 1.00(bfq_6)c0
References
Get alerted when CVE-2014-0356 or the next vulnerability affects your stack