# CVE-2024-11667

A directory traversal vulnerability in the web management interface of Zyxel ATP series firmware versions V5.00 through V5.38, USG FLEX series firmware versions V5.00 through V5.38, USG FLEX 50(W) series firmware versions V5.10 through V5.38, and USG20(W)-VPN series firmware versions V5.10 through V5.38 could allow an attacker to download or upload files via a crafted URL.

- Page: https://www.vulneraibility.com/cve/CVE-2024-11667
- CVSS: 7.5
- Known exploited: yes, in CISA KEV since 2024-12-03; CISA due date 2024-12-24; known ransomware use
- EPSS: 2.93%
- CISA SSVC: exploitation active, automatable yes, technical impact partial (assessed 2024-12-05)
- Weakness: CWE-22
- Published: 2024-11-27

## Affected versions

- Zyxel ATP series firmware: affected versions V5.00 through V5.38
- Zyxel USG20(W)-VPN series firmware: affected versions V5.10 through V5.38
- Zyxel USG FLEX 50(W) series firmware: affected versions V5.10 through V5.38
- Zyxel USG FLEX series firmware: affected versions V5.00 through V5.38

A version outside these ranges is not a statement that it is unaffected.

## References

- [advisory] https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-protecting-against-recent-firewall-threats-11-27-2024
- [other] https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-11667

---
Summary, impact and action are written by the vulneraibility.com AI analysis pipeline from the CVE record, NVD, CISA and FIRST data; verify against the references.