CVE-2017-15226

Zyxel NBG6716 V1.00(AAKG.9)C0 devices allow command injection in the ozkerz component because beginIndex and endIndex are used directly in a popen call.

Date published : 2017-10-10

https://www.secarma.co.uk/labs/sohopelessly-broken-0-day-strategy/