CVE-2024-11667Used in ransomware
ZY
Zyxel Multiple Firewalls
Zyxel Multiple Firewalls Path Traversal Vulnerability
What it is
Multiple Zyxel firewalls contain a path traversal vulnerability in the web management interface that could allow an attacker to download or upload files via a crafted URL.
What to do
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Vendor notices and references
- www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-protecting-aga
- nvd.nist.gov/vuln/detail/CVE-2024-11667
Description and required action as published by CISA. Full record at NVD.
Other Zyxel entries on the list
- GS1900 Series Switches Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability CVE-2026-7273 · Sep 21, 2026
- DSL CPE Devices Zyxel DSL CPE OS Command Injection Vulnerability CVE-2024-40891 · Feb 11, 2025
- DSL CPE Devices Zyxel DSL CPE OS Command Injection Vulnerability CVE-2024-40890 · Feb 11, 2025
- EMG2926 Routers Zyxel EMG2926 Routers Command Injection Vulnerability CVE-2017-6884 · Sep 18, 2023
- P660HN-T1A Routers Zyxel P660HN-T1A Routers Command Injection Vulnerability CVE-2017-18368 · Aug 7, 2023
- Multiple Network-Attached Storage (NAS) Devices Zyxel Multiple NAS Devices Command Injection Vulnerability CVE-2023-27992 · Jun 23, 2023