CVE-2024-40891

Severity

high · on CISA KEV actively exploited

Source

CISA-KEV · kev

Published

2025-02-11

Reference

https://nvd.nist.gov/vuln/detail/CVE-2024-40891

⚡ RCE ⌖ exploited in the wild shame 65/100 rceexploited-in-wild

Multiple Zyxel DSL CPE devices contain a post-authentication command injection vulnerability in the management commands that could allow an authenticated attacker to execute OS commands via Telnet.

Players implicated

Zyxel · vendor DSL CPE Devices · product

Description

Multiple Zyxel DSL CPE devices contain a post-authentication command injection vulnerability in the management commands that could allow an authenticated attacker to execute OS commands via Telnet.

Affected FedRAMP products 0 in the catalog

No correlated FedRAMP products.