Vulnerability · CVE-2024-11667
Zyxel Multiple Firewalls Path Traversal Vulnerability
Published Nov 21, 2024 · catalog updated Aug 4, 2026 · Zyxel Multiple Firewalls
Patch now
CVE-2024-11667 is in the CISA known-exploited catalog, due Dec 24, 2024. Confirm Zyxel Multiple Firewalls against the vendor advisory and apply that fix. The CVSS score does not change the priority.
Gaps on this record
- No version range is stored. A customer cannot check an installed version against this record.
- Severity
- Critical9.8
- Known exploitation
- CISA KEV and VulnCheck KEV
- EPSS
- 2.93%
- Remediation
- Remediation guidance
- Affected products
- cpe zyxel/zld · vendor Zyxel Multiple Firewalls
A directory traversal vulnerability in the web management interface of Zyxel ATP series firmware versions V5.00 through V5.38, USG FLEX series firmware versions V5.00 through V5.38, USG FLEX 50(W) series firmware versions V5.10 through V5.38, and USG20(W)-VPN series firmware versions V5.10 through V5.38 could allow an attacker to download or upload files via a crafted URL.
Are you affected?
Enter the version you run. The result uses only the ranges stored on this record.
The check returns affected, not affected, or incomplete. It does not guess a version that is missing from the record.
- cpe zyxel/zldversion unspecified
- vendor Zyxel Multiple Firewallsversion unspecified
How to fix CVE-2024-11667
Recommended remediation
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. CISA due date Dec 24, 2024.
Official advisories
What to do
Three questions, each answered from this record only. Confirm the vendor advisory before you patch.
Should you patch?
CVE-2024-11667 is in the CISA known-exploited catalog, due Dec 24, 2024. Confirm Zyxel Multiple Firewalls against the vendor advisory and apply that fix. The CVSS score does not change the priority.
Which versions are affected?
Affected version ranges are not on this record. Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
What should an analyst verify?
CWE-22: Path Traversal. EPSS 2.93%. The CISA KEV listing is the exploitation evidence. No Exploit-DB or Metasploit reference is linked. Use the source links for the original advisory.
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Nov 27, 2024 · Catalog
Detected
A directory traversal vulnerability in the web management interface of Zyxel ATP series firmware versions V5.00 through V5.38, USG FLEX series firmware versions V5.00 through V5.38, USG FLEX 50(W) series firmware versions V5.10 through V5.38, and USG20(W)-VPN series firmware versions V5.10 through V5.38 could allow an attacker to download or upload files via a crafted URL.
Dec 3, 2024 · CISA KEV
Known exploited
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Dec 24, 2024 · CISA KEV
Remediation due
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Aug 4, 2026 · Catalog
Updated
A directory traversal vulnerability in the web management interface of Zyxel ATP series firmware versions V5.00 through V5.38, USG FLEX series firmware versions V5.00 through V5.38, USG FLEX 50(W) series firmware versions V5.10 through V5.38, and USG20(W)-VPN series firmware versions V5.10 through V5.38 could allow an attacker to download or upload files via a crafted URL.
Sources
- CISA KEVConfirmed exploitationCVE-2024-11667
Multiple Zyxel firewalls contain a path traversal vulnerability in the web management interface that could allow an attacker to download or upload files via a crafted URL.
cisa.gov - CVE.orgVulnerability recordCVE-2024-11667
Official CVE identifier
cve.org - FIRST EPSSExploitation probabilityCVE-2024-11667
30-day exploitation probability 2.9%
first.org - NIST NVDVulnerability recordCVE-2024-11667
A directory traversal vulnerability in the web management interface of Zyxel ATP series firmware versions V5.00 through V5.38, USG FLEX series firmware versions V5.00 through V5.38, USG FLEX 50(W) series firmware versions V5.10 through V5.38, and USG20(W)-VPN series firmware vers
nvd.nist.gov - VulnCheck KEVConfirmed exploitationCVE-2024-11667
Multiple Zyxel firewalls contain a path traversal vulnerability in the web management interface that could allow an attacker to download or upload files via a crafted URL.
vulncheck.com
References
Freshness
Last verified in this catalog Oct 17, 2026. Significant claims (KEV, EPSS, CVSS, affected ranges) come from the source rows above — open the original publisher for the authoritative advisory.