[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fym3WIY8BfJs2qF5YjlHlr1KLceNV-Z9JZ7UNQPNFGIw":3,"g5a-risk:CVE-2024-29974":147},{"success":4,"data":5,"meta":144},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":30,"epssPercentile":27,"epssTimeSeries":31,"severity":32,"affectedProducts":33,"affectedProductsCount":49,"references":50,"referencesCount":49,"weaknesses":66,"weaknessesCount":75,"isActivelyExploited":76,"cisaInfo":27,"otxData":27,"relatedBlogPosts":77,"seoMetadata":78,"configurations":103,"relatedVendorCves":128,"notableEvents":129},"CVE-2024-29974","What is CVE-2024-29974?","** UNSUPPORTED WHEN ASSIGNED **\nThe remote code execution vulnerability in the CGI program “file_upload-cgi” in Zyxel NAS326 firmware versions before V5.21(AAZF.17)C0 and NAS542 firmware versions before V5.21(ABAG.14)C0 could allow an unauthenticated attacker to execute arbitrary code by uploading a crafted configuration file to a vulnerable device.","** UNSUPPORTED WHEN ASSIGNED ** The remote code execution vulnerability in the CGI program “file_upload-cgi” in Zyxel NAS326 firmware versions before V5.21(A...","2024-06-04T02:15:48.517","2025-01-22T22:40:57.087",9.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":27,"CVSSMetricV2":27,"CVSSMetricV40":27},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"security@zyxel.com.tw","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":25,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",null,3.9,5.9,0.22784,[30,30,30,30,30,30,30],"Critical",[34,39,43,46],{"vendor":35,"product":36,"version":37,"criteria":38,"vulnerable":4},"zyxel","nas326_firmware","*","cpe:2.3:o:zyxel:nas326_firmware:*:*:*:*:*:*:*:*",{"vendor":35,"product":40,"version":41,"criteria":42,"vulnerable":4},"nas326","-","cpe:2.3:h:zyxel:nas326:-:*:*:*:*:*:*:*",{"vendor":35,"product":44,"version":37,"criteria":45,"vulnerable":4},"nas542_firmware","cpe:2.3:o:zyxel:nas542_firmware:*:*:*:*:*:*:*:*",{"vendor":35,"product":47,"version":41,"criteria":48,"vulnerable":4},"nas542","cpe:2.3:h:zyxel:nas542:-:*:*:*:*:*:*:*",4,[51,57,62,64],{"url":52,"source":53,"tags":54},"https:\u002F\u002Foutpost24.com\u002Fblog\u002Fzyxel-nas-critical-vulnerabilities\u002F","Outpost24",[55,56],"Exploit","Third Party Advisory",{"url":58,"source":59,"tags":60},"https:\u002F\u002Fwww.zyxel.com\u002Fglobal\u002Fen\u002Fsupport\u002Fsecurity-advisories\u002Fzyxel-security-advisory-for-multiple-vulnerabilities-in-nas-products-06-04-2024","Zyxel",[61],"Vendor Advisory",{"url":52,"source":53,"tags":63},[55,56],{"url":58,"source":59,"tags":65},[61],[67],{"id":68,"name":69,"description":70,"extendedDescription":71,"status":72,"abstraction":73,"structure":74},"CWE-434","Unrestricted Upload of File with Dangerous Type","The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.","","Draft","Base","Simple",1,false,[],{"title":79,"metaDescription":80,"keywords":81,"canonicalUrl":82,"structuredData":83},"What is CVE-2024-29974? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2024-29974, a critical severity cyber security vulnerability from 2024. ** UNSUPPORTED WHEN ASSIGNED ** The remote code executi...","CVE-2024-29974, CVE-2024-29974 vulnerability, CVE-2024-29974 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2024, CVSS score, exploit, patch, remediation, zyxel security, nas326_firmware vulnerability, nas326 vulnerability, nas542_firmware vulnerability, nas542 vulnerability","\u002Fwhat-is\u002Fcve-2024-29974",{"@context":84,"@type":85,"headline":79,"description":80,"datePublished":10,"dateModified":11,"author":86,"publisher":90,"about":94,"mainEntityOfPage":98,"articleSection":101,"keywords":102},"https:\u002F\u002Fschema.org","TechArticle",{"@type":87,"name":88,"url":89},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":87,"name":88,"url":89,"logo":91},{"@type":92,"url":93},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":95,"name":6,"description":96,"additionalType":97},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":99,"@id":100},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2024-29974","Cybersecurity","CVE-2024-29974, CVE-2024-29974 vulnerability, CVE-2024-29974 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[104,117],{"Operator":105,"Negate":27,"Nodes":106},"AND",[107,113],{"Operator":108,"Negate":27,"CPEMatch":109},"OR",[110],{"Vulnerable":4,"Criteria":38,"MatchCriteriaID":111,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":112,"VersionEndIncluding":27},"DF437A28-8199-4AB6-9F07-F061994C0D9C","5.21\\(aazf.17\\)c0",{"Operator":108,"Negate":27,"CPEMatch":114},[115],{"Vulnerable":27,"Criteria":42,"MatchCriteriaID":116,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"E0A01B19-4A91-4FBC-8447-2E854346DAC5",{"Operator":105,"Negate":27,"Nodes":118},[119,124],{"Operator":108,"Negate":27,"CPEMatch":120},[121],{"Vulnerable":4,"Criteria":45,"MatchCriteriaID":122,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":123,"VersionEndIncluding":27},"718ACAC1-C0E1-45DF-A23E-7A7F9CCF1373","5.21\\(abag.14\\)c0",{"Operator":108,"Negate":27,"CPEMatch":125},[126],{"Vulnerable":27,"Criteria":48,"MatchCriteriaID":127,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"31C4DD0F-28D0-4BF7-897B-5EEC32AA7277",[],[130,137],{"id":131,"eventType":132,"eventTime":133,"details":134,"label":135,"color":136},"64931119-c0f4-467d-9fdd-a93a6f70b399","HIGH_EPSS_DELTA","2025-07-14T04:04:23.731158+00:00","Daily EPSS score increased by 0.364 on 2024-06-05","EPSS Score Increased","red",{"id":138,"eventType":139,"eventTime":140,"details":141,"label":142,"color":143},"80ff1404-2376-4400-8de0-fd1519c71221","LOW_EPSS_DELTA","2025-11-19T04:04:46.315215+00:00","Daily EPSS score decreased by 0.302 on 2024-06-05","EPSS Score Decreased","green",{"lastModified":11,"cacheTime":145,"version":146},1793212711335,"2.0",{"score":148,"band":149,"action":150,"scoredAt":151},61,"Medium","Plan remediation","2026-07-01T10:33:03.019867+00:00"]