High 7.5Known exploited (CISA KEV)Published Nov 27, 2024

CVE-2024-11667A directory traversal vulnerability in the web management interface of Zyxel ATP series firmware versions V5.00 through V5.38, USG FLEX series firmware versions V5.00 through V5.38, USG FLEX 50(W) se…

Updated under an hour ago (Oct 28, 2026, 6:10 AM ET)

Does this affect you?

It affects Zyxel ATP series firmware and 27 other products. Add what you run to find out whether that includes you.

CISA lists it as known exploited since Dec 3, 2024; federal agencies had to remediate by Dec 24, 2024, and it is known to be used in ransomware. Treat that date as your deadline.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Zyxel ATP series firmware

Exploited in the last 30 days

A directory traversal vulnerability in the web management interface of Zyxel ATP series firmware versions V5.00 through V5.38, USG FLEX series firmware versions V5.00 through V5.38, USG FLEX 50(W) series firmware versions V5.10 through V5.38, and USG20(W)-VPN series firmware versions V5.10 through V5.38 could allow an attacker to download or upload files via a crafted URL.

CVSS: 7.5 HIGH (v3.1, CNA)CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weakness (CWE): CWE-22
Known exploited: Added to CISA KEV Dec 3, 2024; federal remediation due Dec 24, 2024; known ransomware useApply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
EPSS (exploitation in the next 30 days): 2.93% (percentile 87)
Assigned by: Zyxel
NVD analysis: Analyzed
Record last updated: Aug 4, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Zyxel ATP series firmware zyxel:atp_series_firmware (from the name)	versions V5.00 through V5.38	CNA record
Zyxel USG FLEX series firmware zyxel:usg_flex_series_firmware (from the name)	versions V5.00 through V5.38	CNA record
Zyxel USG FLEX 50(W) series firmware zyxel:usg_flex_50_w_series_firmware (from the name)	versions V5.10 through V5.38	CNA record
Zyxel USG20(W)-VPN series firmware zyxel:usg20_w_vpn_series_firmware (from the name)	versions V5.10 through V5.38	CNA record
zyxel usg_flex_firmware zyxel:usg_flex_100h_firmware	from 5.00 through 5.38	CISA ADP
zyxel usg_flex_firmware zyxel:usg_flex_100hp_firmware	from 5.00 through 5.38	CISA ADP
zyxel usg_flex_firmware zyxel:usg_flex_100w_firmware	from 5.00 through 5.38	CISA ADP
zyxel usg_flex_firmware zyxel:usg_flex_200_firmware	from 5.00 through 5.38	CISA ADP
zyxel usg_flex_firmware zyxel:usg_flex_200h_firmware	from 5.00 through 5.38	CISA ADP
zyxel usg_flex_firmware zyxel:usg_flex_200hp_firmware	from 5.00 through 5.38	CISA ADP
1–10 of 28

References

References

https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-protecting-against-recent-firewall-threats-11-27-2024	vendor-advisory
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-11667	us-government-resource

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.