What’s Vulnerable › Vulnerabilities

CVE-2017-6884: Zyxel EMG2926 Routers Command Injection Vulnerability

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: yes — in CISA KEV since 2023-09-18
• EPSS: 33.0% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2017-04-06 · updated 2026-10-01
• Weakness: CWE-78

Description

A command injection vulnerability was discovered on the Zyxel EMG2926 home router with firmware V1.00(AAQT.4)b8. The vulnerability is located in the diagnostic tools, specifically the nslookup function. A malicious user may exploit numerous vectors to execute arbitrary commands on the router, such as the ping_ip parameter to the expert/maintenance/diagnostic/nslookup URI.

Affected products

• Zyxel Emg2926 Firmware: v1.00(aaqt.4)b8

References

• https://www.exploit-db.com/exploits/41782/
• https://www.exploit-db.com/exploits/41782/
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-6884

Get alerted when CVE-2017-6884 or the next vulnerability affects your stack