[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fym3WIY8BfJs2qF5YjlHlr1KLceNV-Z9JZ7UNQPNFGIw":3,"g5a-risk:CVE-2024-29974":150},{"success":4,"data":5,"meta":147},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":33,"epssPercentile":27,"epssTimeSeries":34,"severity":35,"affectedProducts":36,"affectedProductsCount":53,"references":54,"referencesCount":53,"weaknesses":70,"weaknessesCount":79,"isActivelyExploited":46,"cisaInfo":27,"otxData":27,"relatedBlogPosts":80,"seoMetadata":81,"configurations":106,"relatedVendorCves":131,"notableEvents":132},"CVE-2024-29974","What is CVE-2024-29974?","** UNSUPPORTED WHEN ASSIGNED **\nThe remote code execution vulnerability in the CGI program “file_upload-cgi” in Zyxel NAS326 firmware versions before V5.21(AAZF.17)C0 and NAS542 firmware versions before V5.21(ABAG.14)C0 could allow an unauthenticated attacker to execute arbitrary code by uploading a crafted configuration file to a vulnerable device.","** UNSUPPORTED WHEN ASSIGNED ** The remote code execution vulnerability in the CGI program “file_upload-cgi” in Zyxel NAS326 firmware versions before V5.21(A...","2024-06-04T02:15:48.517","2026-06-17T07:23:28.407",9.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":30,"CVSSMetricV2":31,"CVSSMetricV40":32},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"security@zyxel.com.tw","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",null,3.9,5.9,[],[],[],0.22784,[33,33,33,33,33,33,33],"Critical",[37,42,47,50],{"vendor":38,"product":39,"version":40,"criteria":41,"vulnerable":4},"zyxel","nas326_firmware","*","cpe:2.3:o:zyxel:nas326_firmware:*:*:*:*:*:*:*:*",{"vendor":38,"product":43,"version":44,"criteria":45,"vulnerable":46},"nas326","-","cpe:2.3:h:zyxel:nas326:-:*:*:*:*:*:*:*",false,{"vendor":38,"product":48,"version":40,"criteria":49,"vulnerable":4},"nas542_firmware","cpe:2.3:o:zyxel:nas542_firmware:*:*:*:*:*:*:*:*",{"vendor":38,"product":51,"version":44,"criteria":52,"vulnerable":46},"nas542","cpe:2.3:h:zyxel:nas542:-:*:*:*:*:*:*:*",4,[55,61,66,68],{"url":56,"source":57,"tags":58},"https:\u002F\u002Foutpost24.com\u002Fblog\u002Fzyxel-nas-critical-vulnerabilities\u002F","Outpost24",[59,60],"Exploit","Third Party Advisory",{"url":62,"source":63,"tags":64},"https:\u002F\u002Fwww.zyxel.com\u002Fglobal\u002Fen\u002Fsupport\u002Fsecurity-advisories\u002Fzyxel-security-advisory-for-multiple-vulnerabilities-in-nas-products-06-04-2024","Zyxel",[65],"Vendor Advisory",{"url":56,"source":57,"tags":67},[59,60],{"url":62,"source":63,"tags":69},[65],[71],{"id":72,"name":73,"description":74,"extendedDescription":75,"status":76,"abstraction":77,"structure":78},"CWE-434","Unrestricted Upload of File with Dangerous Type","The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.","","Draft","Base","Simple",1,[],{"title":82,"metaDescription":83,"keywords":84,"canonicalUrl":85,"structuredData":86},"What is CVE-2024-29974? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2024-29974, a critical severity cyber security vulnerability from 2024. ** UNSUPPORTED WHEN ASSIGNED ** The remote code executi...","CVE-2024-29974, CVE-2024-29974 vulnerability, CVE-2024-29974 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2024, CVSS score, exploit, patch, remediation, zyxel security, nas326_firmware vulnerability, nas326 vulnerability, nas542_firmware vulnerability, nas542 vulnerability","\u002Fwhat-is\u002Fcve-2024-29974",{"@context":87,"@type":88,"headline":82,"description":83,"datePublished":10,"dateModified":11,"author":89,"publisher":93,"about":97,"mainEntityOfPage":101,"articleSection":104,"keywords":105},"https:\u002F\u002Fschema.org","TechArticle",{"@type":90,"name":91,"url":92},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":90,"name":91,"url":92,"logo":94},{"@type":95,"url":96},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":98,"name":6,"description":99,"additionalType":100},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":102,"@id":103},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2024-29974","Cybersecurity","CVE-2024-29974, CVE-2024-29974 vulnerability, CVE-2024-29974 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[107,120],{"Operator":108,"Negate":27,"Nodes":109},"AND",[110,116],{"Operator":111,"Negate":46,"CPEMatch":112},"OR",[113],{"Vulnerable":4,"Criteria":41,"MatchCriteriaID":114,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":115,"VersionEndIncluding":27},"DF437A28-8199-4AB6-9F07-F061994C0D9C","5.21\\(aazf.17\\)c0",{"Operator":111,"Negate":46,"CPEMatch":117},[118],{"Vulnerable":46,"Criteria":45,"MatchCriteriaID":119,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"E0A01B19-4A91-4FBC-8447-2E854346DAC5",{"Operator":108,"Negate":27,"Nodes":121},[122,127],{"Operator":111,"Negate":46,"CPEMatch":123},[124],{"Vulnerable":4,"Criteria":49,"MatchCriteriaID":125,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":126,"VersionEndIncluding":27},"718ACAC1-C0E1-45DF-A23E-7A7F9CCF1373","5.21\\(abag.14\\)c0",{"Operator":111,"Negate":46,"CPEMatch":128},[129],{"Vulnerable":46,"Criteria":52,"MatchCriteriaID":130,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"31C4DD0F-28D0-4BF7-897B-5EEC32AA7277",[],[133,140],{"id":134,"eventType":135,"eventTime":136,"details":137,"label":138,"color":139},"64931119-c0f4-467d-9fdd-a93a6f70b399","HIGH_EPSS_DELTA","2025-07-14T04:04:23.731158+00:00","Daily EPSS score increased by 0.364 on 2024-06-05","EPSS Score Increased","red",{"id":141,"eventType":142,"eventTime":143,"details":144,"label":145,"color":146},"80ff1404-2376-4400-8de0-fd1519c71221","LOW_EPSS_DELTA","2025-11-19T04:04:46.315215+00:00","Daily EPSS score decreased by 0.302 on 2024-06-05","EPSS Score Decreased","green",{"lastModified":11,"cacheTime":148,"version":149},1792368461483,"2.0",{"score":151,"band":152,"action":153,"scoredAt":154},61,"Medium","Plan remediation","2026-10-16T07:02:37.946388+00:00"]