CVE-2024-11667: Zyxel Multiple Firewalls Path Traversal Vulnerability.
Zyxel Multiple Firewalls Path Traversal Vulnerability. Multiple Zyxel firewalls contain a path traversal vulnerability in the web management interface that could allow an attacker to download or upload files via a crafted URL.
- CISA KEV-listed (remediation due 2024-12-24)
- used in ransomware campaigns
- EPSS 28.9% (96.7% percentile)