{"cvss":8.8,"datePublished":"2020-01-08T00:00:00Z","dateUpdated":"2020-01-08T00:00:00Z","description":"Zyxel EMG2926 routers contain a command injection vulnerability located in the diagnostic tools, specifically the nslookup function. A malicious user may exploit numerous vectors to execute malicious commands on the router, such as the ping_ip parameter to the expert/maintenance/diagnostic/nslookup URI.","dueDate":"2023-10-09T00:00:00Z","id":"CVE-2017-6884","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Known","product":"EMG2926 Routers","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","severity":"HIGH","source":"vulncheck_kev","title":"Zyxel EMG2926 Routers Command Injection Vulnerability","vendor":"Zyxel"}