⚠ Actively exploited in ransomware campaigns

This vulnerability is on the CISA Known Exploited Vulnerabilities list and has been used in known ransomware attacks. CISA required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.. Due date: 2024-12-24.

CVE-2024-11667

CWE-22 — Path Traversal5 documents5 sources

Severity

9.8CRITICAL

EPSS

35.9%

top 2.92%

CISA KEV

KEVRansomware

Added 2024-12-03

Due 2024-12-24

Exploit

Exploited in wild

Active exploitation observed

Affected products

Zyxel ZLD Zyxel ATP Series Firmware Zyxel Usg20(w)-vpn Series Firmware +2 more

Timeline

PublishedNov 27

KEV addedDec 3

KEV dueDec 24

CISA Required Action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Description

A directory traversal vulnerability in the web management interface of Zyxel ATP series firmware versions V5.00 through V5.38, USG FLEX series firmware versions V5.00 through V5.38, USG FLEX 50(W) series firmware versions V5.10 through V5.38, and USG20(W)-VPN series firmware versions V5.10 through V5.38 could allow an attacker to download or upload files via a crafted URL.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NExploitability: 3.9 | Impact: 3.6

Affected Packages5 packages

▶CVEListV5zyxel/usg_flex_series_firmwareversions V5.00 through V5.38

▶CVEListV5zyxel/usg_flex_50(w)_series_firmwareversions V5.10 through V5.38

▶CVEListV5zyxel/usg20(w)-vpn_series_firmwareversions V5.10 through V5.38

▶CVEListV5zyxel/atp_series_firmwareversions V5.00 through V5.38

▶NVDzyxel/zld5.00 — 5.38+1

🔴Vulnerability Details

GHSA

GHSA-h9fh-gm4r-6cxh: A directory traversal vulnerability in the web management interface of Zyxel ATP series firmware versions V5↗2024-11-27

▶

CVEList

CVE-2024-11667: A directory traversal vulnerability in the web management interface of Zyxel ATP series firmware versions V5↗2024-11-27

▶

VulnCheck

Zyxel Multiple Firewalls Path Traversal Vulnerability↗2024

▶

📋Vendor Advisories

CISA

Zyxel Multiple Firewalls Path Traversal Vulnerability↗2024-12-03

▶