CVE-2024-11667KEV · OVERDUECWE-22path-traversal

Zyxel Multiple Firewalls Path Traversal Vulnerability

High · published November 27, 2024

Patch now

Confirmed exploited, and the score agrees

CVSS calls it high at 7.5. It is confirmed in active exploitation. It sits in the 87.0th percentile for exploit probability.

669
days past CISA
deadline
CVSS v3.1
7.5
EPSS
3%
Percentile
87.0
In the wild
Confirmed
What it is

⚡ A crafted URL can let attackers access files they shouldn't — it's like giving a stranger the keys to your office just by sending them an email! 🔑 Imagine the web management interface as a hotel reception desk. A directory traversal vulnerability is like a sneaky guest who finds a way to access the staff-only areas by simply asking for the wrong key — no ID needed! This vulnerability could allow attackers to download sensitive files or even upload malicious ones. Just think about it: they could compromise your device, gain access to confidential information, or even alter your configurations! 🚨 It's a big deal, and your network's security is at stake!

Put simply

Imagine the web management interface as a hotel reception desk. A directory traversal vulnerability is like a sneaky guest who finds a way to access the staff-only areas by simply asking for the wrong key — no ID needed! This directory traversal flaw in the Zyxel firmware lets attackers manipulate URLs to access unauthorized files on the server, bypassing normal protections. It affects several firmware versions of the Zyxel ATP and USG FLEX series, specifically versions V5.00 to V5.38.

What to do

This vulnerability could allow attackers to download sensitive files or even upload malicious ones. Just think about it: they could compromise your device, gain access to confidential information, or even alter your configurations! 🚨 It's a big deal, and your network's security is at stake! To secure your system, immediately patch your firmware to the latest version to close this vulnerability. Also, review your access controls to ensure no unintended access is granted. Monitor your network for any suspicious activity to catch potential exploits early! You've got this! Secure your network and keep those malicious actors at bay! 🛡️

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.02929 · 87.0th percentile
Weakness
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published
2024-11-27T15:15Z
KEV added
2024-12-03 · due 2024-12-24
Affected products (4)
ProductVersionsFixed in
zyxel/zld≥ 5.00, ≤ 5.38—
zyxel/zld≥ 5.00, ≤ 5.38—
zyxel/zld≥ 5.10, ≤ 5.38—
zyxel/zld≥ 5.10, ≤ 5.38—
References (2)
EPSS history
Timeline
  • 03 DEC 00:00Z
    Added to CISA KEV — remediate by Dec 24
    kev
  • 27 NOV 09:39Z
    A directory traversal vulnerability in the web management interface of Zyxel ATP series firmware versions V5.00 through V5.38, USG FLEX series…
    cvelistv5