CVE-2024-11667

Published Nov 27, 2024

Last updated 21 days ago

Exploit known CVSS high 7.5

Overview

Description: A directory traversal vulnerability in the web management interface of Zyxel ATP series firmware versions V5.00 through V5.38, USG FLEX series firmware versions V5.00 through V5.38, USG FLEX 50(W) series firmware versions V5.10 through V5.38, and USG20(W)-VPN series firmware versions V5.10 through V5.38 could allow an attacker to download or upload files via a crafted URL.
Source: security@zyxel.com.tw
NVD status: Analyzed

Risk scores

CVSS 3.1

Type: Primary
Base score: 9.8
Impact score: 5.9
Exploitability score: 3.9
Vector string: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Severity: CRITICAL

Known exploits

Data from CISA

Vulnerability name: Zyxel Multiple Firewalls Path Traversal Vulnerability
Exploit added on: Dec 3, 2024
Exploit action due: Dec 24, 2024
Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Weaknesses

security@zyxel.com.tw: CWE-22

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:zyxel:zld:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "18B592F1-F584-4573-AD75-398CE03F6627",
            "versionEndIncluding": "5.38",
            "versionStartIncluding": "5.00"
          }
        ],
        "operator": "OR"
      },
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:h:zyxel:atp:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "788B28B2-E2EE-4D98-8862-15B121009B6E"
          },
          {
            "criteria": "cpe:2.3:h:zyxel:atp100:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "7F7654A1-3806-41C7-82D4-46B0CD7EE53B"
          },
          {
            "criteria": "cpe:2.3:h:zyxel:atp100w:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "47398FD0-6C5E-4625-9EFD-DE08C9AB7DB2"
          },
          {
            "criteria": "cpe:2.3:h:zyxel:atp200:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "D68A36FF-8CAF-401C-9F18-94F3A2405CF4"
          },
          {
            "criteria": "cpe:2.3:h:zyxel:atp500:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "2818E8AC-FFEE-4DF9-BF3F-C75166C0E851"
          },
          {
            "criteria": "cpe:2.3:h:zyxel:atp700:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "0B41F437-855B-4490-8011-DF59887BE6D5"
          },
          {
            "criteria": "cpe:2.3:h:zyxel:atp800:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "66B99746-0589-46E6-9CBD-F38619AD97DC"
          }
        ],
        "operator": "OR"
      }
    ],
    "operator": "AND"
  },
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:zyxel:zld:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "18B592F1-F584-4573-AD75-398CE03F6627",
            "versionEndIncluding": "5.38",
            "versionStartIncluding": "5.00"
          }
        ],
        "operator": "OR"
      },
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:h:zyxel:usg_flex:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "E4EDCC3C-8EE5-43D3-8739-34987F025DF2"
          },
          {
            "criteria": "cpe:2.3:h:zyxel:usg_flex_100:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "2B30A4C0-9928-46AD-9210-C25656FB43FB"
          },
          {
            "criteria": "cpe:2.3:h:zyxel:usg_flex_100ax:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "03036815-04AE-4E39-8310-DA19A32CFA48"
          },
          {
            "criteria": "cpe:2.3:h:zyxel:usg_flex_100w:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "D74ABA7E-AA78-4A13-A64E-C44021591B42"
          },
          {
            "criteria": "cpe:2.3:h:zyxel:usg_flex_200:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "F93B6A06-2951-46D2-A7E1-103D7318D612"
          },
          {
            "criteria": "cpe:2.3:h:zyxel:usg_flex_50:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "646C1F07-B553-47B0-953B-DC7DE7FD0F8B"
          },
          {
            "criteria": "cpe:2.3:h:zyxel:usg_flex_500:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "92C697A5-D1D3-4FF0-9C43-D27B18181958"
          },
          {
            "criteria": "cpe:2.3:h:zyxel:usg_flex_700:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "9D1396E3-731B-4D05-A3F8-F3ABB80D5C29"
          }
        ],
        "operator": "OR"
      }
    ],
    "operator": "AND"
  },
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:zyxel:zld:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "CBEE7B76-74EB-4570-9A5B-071BA9E36DB9",
            "versionEndIncluding": "5.38",
            "versionStartIncluding": "5.10"
          }
        ],
        "operator": "OR"
      },
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:h:zyxel:usg_flex_50w:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "110A1CA4-0170-4834-8281-0A3E14FC5584"
          }
        ],
        "operator": "OR"
      }
    ],
    "operator": "AND"
  },
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:zyxel:zld:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "CBEE7B76-74EB-4570-9A5B-071BA9E36DB9",
            "versionEndIncluding": "5.38",
            "versionStartIncluding": "5.10"
          }
        ],
        "operator": "OR"
      },
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:h:zyxel:usg_20w-vpn:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "6BEA412F-3DA1-4E91-9C74-0666147DABCE"
          }
        ],
        "operator": "OR"
      }
    ],
    "operator": "AND"
  }
]

Overview

Risk scores

CVSS 3.1

Known exploits

Weaknesses

Social media

Configurations

References