CVE-2024-11667
CVE-2024-11667: 1 tracked advisory record across Zyxel. CISA KEV listed; exploitation observed. Compare source-reported impact, fixes and remediation.
Compare the source-linked records below. Ratings and product/version details belong to each advisory; they are not a single CVE-wide score or proof that every listed product is affected. How VulniPulse collects and checks evidence.
Vendor advisory comparison
Zyxel
1 advisory- Advisory severityHigh7.5
High [CVE-2024-11667] directory traversal vulnerability in the web management interface of Zyxel ATP series firmware versions V5.00 through V5.38, USG FLEX series firmware versions V5.00 through V5.38, USG FLEX 50(W) series firmware versions V5.10 through V5.38, and USG20(W)-VPN series firmware versions V5.10 through V5.38 could allow an attacker to download or upload files via a crafted URL
CVE-2024-11667Source published Source updated
A directory traversal vulnerability in the web management interface of Zyxel ATP series firmware versions V5.00 through V5.38, USG FLEX series firmware versions V5.00 through V5.38, USG FLEX 50(W) series firmware versions V5.10 through V5.38, and USG20(W)-VPN series firmware versions V5.10 through V5.38 could allow an attacker to download or upload files via a crafted URL.
- Affected products in this advisory
- ATP series firmware
- USG FLEX series firmware
- USG FLEX 50(W) series firmware
- USG20(W)-VPN series firmware
- Source-reported affected versions
- ATP series firmware versions V5.00 through V5.38
- USG FLEX series firmware versions V5.00 through V5.38
- USG FLEX 50(W) series firmware versions V5.10 through V5.38
- USG20(W)-VPN series firmware versions V5.10 through V5.38
- Source-reported fixed versions
- No fixed-version detail extracted. This does not mean no fix exists.
- Mitigation guidance
- No mitigation guidance extracted; consult the source.
Android app · Google Play
Monitor future Zyxel CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.