Zyxel VMG8825-T50K Post-Authentication Command Injection Vulnerability in DNSServer Parameter

A post-authentication command injection vulnerability has been identified in the Zyxel VMG8825-T50K router, specifically in the DNSServer parameter of the diagnostic function. This vulnerability affects firmware versions through V5.50(ABOM.8.5)C0. An authenticated attacker with administrator privileges could exploit this vulnerability to execute operating system commands on the affected device. The vulnerability requires access to the device's management interface, and the attack can only be successful if the administrator's password has been compromised.

Impact

Exploitation of this vulnerability allows for arbitrary command execution on the affected device's operating system.

Remediation

Users can upgrade to Zyxel firmware version V5.50(ABOM.8.6)C0 to address this vulnerability. For devices obtained through an ISP, contact the ISP's support team. For other devices, reach out to the local Zyxel support team or visit Zyxel's Community for assistance.