CVE-2024-11667
CISA KEV RANSOMWARE
ACT NOW
Priority: 0.00
BB Relevance:
1/100
Published: N/A
Modified: N/A
First seen: 2026-10-29
Status: pending_score
Description
Multiple Zyxel firewalls contain a path traversal vulnerability in the web management interface that could allow an attacker to download or upload files via a crafted URL.
CISA Known Exploited Vulnerability
Vendor / Product
Zyxel — Multiple Firewalls
Date Added
2024-12-03
Remediation Due
2024-12-24
Ransomware Use
CONFIRMED
https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-protecting-against-recent-firewall-threats-11-21-2024 ; https://nvd.nist.gov/vuln/detail/CVE-2024-11667
Weakness Classification (1)
Affected Software (4)
References & Advisories (2)
Vendor Advisory
US Government Resource