CVE-2024-11667highunder attackransomwareCWE-22

CVE-2024-11667: high-severity vulnerability in Zyxel ATP series firmware

Published · Updated

Follow this CVE+ Monitor USG FLEX series+ Monitor ATP series

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

51Vexday Risk Score

Prioritize patching. It under exploitation confirmed by CISA.

ssvc Actcvss 7.5epss 3.0%
from disclosure to weapon
Published on NVDNov 27
CISA KEV+6d
Action required by CISAfederal deadline: 2024-12-24

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

In short

A flaw in Zyxel firewall web interfaces lets attackers download or upload files by using specially crafted web addresses, potentially exposing sensitive data or injecting malicious files.

Technical detail

Directory traversal vulnerability in web management interface allowing unauthenticated or authenticated attackers to bypass path restrictions via crafted URLs to access arbitrary files on the system. Affects Zyxel ATP, USG FLEX, and USG20(W)-VPN devices running vulnerable firmware versions (V5.00-V5.38 or V5.10-V5.38 depending on model), enabling unauthorized file read/write operations.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

A directory traversal vulnerability in the web management interface of Zyxel ATP series firmware versions V5.00 through V5.38, USG FLEX series firmware versions V5.00 through V5.38, USG FLEX 50(W) series firmware versions V5.10 through V5.38, and USG20(W)-VPN series firmware versions V5.10 through V5.38 could allow an attacker to download or upload files via a crafted URL.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected products
Zyxel · ATP series firmwareZyxel · USG20(W)-VPN series firmwareZyxel · USG FLEX 50(W) series firmwareZyxel · USG FLEX series firmware
Related CVEs — Zyxel ATP series firmware

In the same product, most dangerous first.

CVE-2022-30525CRITICALCVE-2022-30525EPSS 99.9%KEVCVE-2023-28771CRITICALCVE-2023-28771EPSS 99.3%KEVCVE-2023-33010CRITICALCVE-2023-33010EPSS 29.0%KEVCVE-2023-33009CRITICALCVE-2023-33009EPSS 28.1%KEVCVE-2022-0342CRITICALCVE-2022-0342EPSS 95.1%CVE-2023-33012HIGHCVE-2023-33012EPSS 9.9%