CVE-2024-11667
Zyxel Multiple Firewalls: Path Traversal
As of , CVE-2024-11667 in Zyxel Multiple Firewalls is on CISA's list of exploited vulnerabilities: CISA listed it on . Our patch-first group: Patch this week.
- Exploited
- Yes: CISA listed it on 3 December 2024
- US federal deadline
- 24 December 202421 days after CISA listed it. US federal civilian agencies must fix it by then.
- Used in ransomware campaigns
- Known
- EPSS score
- 0.03Higher than 86% of the CVEs EPSS scores. EPSS estimates the chance of exploitation activity in the next 30 days.
- EPSS when listed
- 0.00 on 3 December 2024EPSS on the day CISA listed it.
- Public exploit
- None foundNeither Metasploit nor Exploit-DB lists one.
- Fix
- Vendor advice: www.zyxel.comLinks below, from CISA's entry.
What CISA says to do
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
CISA's required action
What the flaw is
Multiple Zyxel firewalls contain a path traversal vulnerability in the web management interface that could allow an attacker to download or upload files via a crafted URL.
CISA's description
A directory traversal vulnerability in the web management interface of Zyxel ATP series firmware versions V5.00 through V5.38, USG FLEX series firmware versions V5.00 through V5.38, USG FLEX 50(W) series firmware versions V5.10 through V5.38, and USG20(W)-VPN series firmware versions V5.10 through V5.38 could allow an attacker to download or upload files via a crafted URL.
The CVE record's description, from Zyxel
- CVE published
- 27 November 2024
- Assigned by
- Zyxel
- CVSS
- 7.5 High (CVSS 3.1, from the CNA)
- CWE-22
- Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
- CISA SSVC, exploitation
- active
- CISA SSVC, automatable
- yes
- CISA SSVC, technical impact
- partial
Timeline
- The CVE record was published.
- CISA added it to its list of exploited vulnerabilities.
- The US federal deadline to fix it.
Multiple Firewalls: other exploited entries
| Vulnerability | Product | Our group | Listed | Deadline | EPSS |
|---|---|---|---|---|---|
| CVE-2023-28771OS Command Injection | Zyxel Multiple Firewalls | Patch this weekMetasploit module; EPSS 0.99 | 0.99 | ||
| CVE-2022-30525OS Command Injection | Zyxel Multiple Firewalls | Patch this weekMetasploit module; EPSS 0.99 | 0.99 | ||
| CVE-2023-33009Buffer Overflow | Zyxel Multiple Firewalls | Patch soon | 0.28 | ||
| CVE-2023-33010Buffer Overflow | Zyxel Multiple Firewalls | Patch soon | 0.29 |
Read further
- CVE recordcve.org
- NVD entrynvd.nist.gov
- CISA's catalogcisa.gov
- EPSS for this CVEapi.first.org