Zyxel NWA50AX PRO Path Traversal Vulnerability Allowing File Deletion
Vulnerability
A path traversal vulnerability has been identified in the file_upload-cgi CGI program of Zyxel NWA50AX PRO firmware versions through 7.10(ACGE.2). This vulnerability could enable an authenticated attacker with administrator privileges to access certain directories and delete files, including the device's configuration file.
Impact
Exploitation of this vulnerability could lead to unauthorized file deletion, including critical configuration files, on the affected device.
Remediation
Users can upgrade to Zyxel NWA50AX PRO firmware version 7.10(ACGE.3) to address this vulnerability.
Added: Jul 15, 2025, 2:17 AM
Updated: Jul 15, 2025, 2:17 AM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
2.5exploitability
4.8remediation
7.7relevance
0.2threat
0.0urgency
2.9incentive
1.7Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.