Zyxel NSA310 Remote Code Execution Vulnerability

A remote unauthenticated code execution vulnerability in Zyxel NSA310 allows remote attackers to execute arbitrary code as a `root' user.

Due to the way commands are passed inside the system, and lack of proper filtering of user information, an attacker can use the ` (single quote) to escape the original command syntax and introduce additional commands to be executed by the code.

Zyxel NSA310 V4.70(AFK.1)

Try to execute the `id' command.

No known solution was made available for at least one year since the disclosure of this vulnerability. Likely none will be provided anymore. General solution options are to upgrade to a newer release, disable respective features, remove the product or replace the product by another one.