Live › vulnerability › CVE-2017-6884
Go to dashboardZyxel EMG2926 routers have a command injection flaw in the nslookup diagnostic function, reachable through the ping_ip parameter of the expert/maintenance/diagnostic/nslookup URI. An attacker can run arbitrary commands on the router, and CISA reports it is known to be exploited in the wild, including in ransomware campaigns.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Zyxel EMG2926 Routers | vendor | – | – |
| zyxel emg2926 firmware | vendor | = v1.00\(aaqt.4\)b8 | – |
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Zyxel EMG2926 routers contain a command injection vulnerability located in the diagnostic tools, specifically the nslookup function. A malicious user may exploit numerous vectors to execute malicious commands on the router, such as the ping_ip parameter to the expert/maintenance/diagnostic/nslookup URI.
CISA required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
This page as .md · .json · in your agent: get_signal("CVE-2017-6884")
CISA KEV catalog, Creative Commons 0 · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.