CVE-2024-11667CISA KEVEPSS p86.6%

CVE-2024-11667Zyxel Multiple Firewalls Path Traversal Vulnerability

Zyxel / Multiple Firewalls

Description

Multiple Zyxel firewalls contain a path traversal vulnerability in the web management interface that could allow an attacker to download or upload files via a crafted URL.

Scoring

CVSS 7.5 ()
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS2.93% probability of exploitation · percentile 86.6% · 2026-10-05T12:00:23Z
Last modified2026-08-05

CISA KEV entry

Added to KEV: 2024-12-03

(incoming)1

TypeTargetConfidenceTier
KEVEntryZyxel Multiple Firewalls Path Traversal Vulnerabilitykev-cve-2024-116670%live

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

CVE
Zyxel Multiple Firewalls OS Command Injection Vulnerability
CVE
Draytek VigorConnect Path Traversal Vulnerability
CVE
Zyxel Multiple NAS Devices Command Injection Vulnerability
CVE
Zyxel DSL CPE OS Command Injection Vulnerability
CVE
Fortinet FortiWeb Path Traversal Vulnerability
CVE
Zyxel Multiple NAS Devices OS Command Injection Vulnerability
Sourced from NVD + CISA KEV + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.