CVE-2020-13365 Privilege escalation in n/a
A local binary allows non-root users to generate credentials for an undocumented root account, enabling full system compromise via Telnet.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2020-13365?
CVE-2020-13365 is a high-severity vulnerability in n/a, published on 6 Aug 2020. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Certain Zyxel products have a locally accessible binary that allows a non-root user to generate a password for an undocumented user account that can be used for a TELNET session as root. This affects NAS520 V5.21(AASZ.4)C0, V5.21(AASZ.0)C0, V5.11(AASZ.3)C0, and V5.11(AASZ.0)C0; NAS542 V5.11(ABAG.0)C0, V5.20(ABAG.1)C0, and V5.21(ABAG.3)C0; NSA325 v2_V4.81(AALS.0)C0 and V4.81(AAAJ.1)C0; NSA310 4.22(AFK.0)C0 and 4.22(AFK.1)C0; NAS326 V5.21(AAZF.8)C0, V5.11(AAZF.4)C0, V5.11(AAZF.2)C0, and V5.11(AAZF.3)C0; NSA310S V4.75(AALH.2)C0; NSA320S V4.75(AANV.2)C0 and V4.75(AANV.1)C0; NSA221 V4.41(AFM.1)C0; and NAS540 V5.21(AATB.5)C0 and V5.21(AATB.3)C0.
Weakness: CWE-287
Which versions are affected by CVE-2020-13365?
It affects 4 products.
Products include Zyxel Nas326 Firmware, Zyxel Nas520 Firmware, Zyxel Nas540 Firmware, Zyxel Nas542 Firmware.
How do I fix CVE-2020-13365?
No fix has been published for CVE-2020-13365 yet. Limit exposure of the affected software until one is available.
Is CVE-2020-13365 being exploited?
There is no known exploitation of CVE-2020-13365 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-355p-v284-v3xp.