CVE-2024-11667

🔥 Known Exploited (CISA KEV)HIGH

7.5

CVSS Severity Score

EPSS Score0.0000%

EPSS Percentile0.00th

Published2024-11-27

Last Modified2026-06-17

Data SourcesNVDCISA KEV

Vulnerability Description

A directory traversal vulnerability in the web management interface of Zyxel ATP series firmware versions V5.00 through V5.38, USG FLEX series firmware versions V5.00 through V5.38, USG FLEX 50(W) series firmware versions V5.10 through V5.38, and USG20(W)-VPN series firmware versions V5.10 through V5.38 could allow an attacker to download or upload files via a crafted URL.

Affected Platforms (CPE)

💻

Zyxel

Zld

>= 5.00 and <= 5.38>= 5.10 and <= 5.38

References & Advisories

🔗 https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-protecting-against-recent-firewall-threats-11-27-2024

🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-11667

Vulnerability Description

Affected Platforms (CPE)

Zld

References & Advisories

相关漏洞威胁