Threat intelligence / Vulnerability
CVE-2024-40890
Multiple Zyxel DSL CPE devices contain a post-authentication command injection vulnerability in the CGI program that could allow an authenticated attacker to execute OS commands via a crafted HTTP request.
Vulnerability
TypeVulnerability
External ID—
First seen2025-02-11
Last seen2025-02-11
Confidence
—
Multiple Zyxel DSL CPE devices contain a post-authentication command injection vulnerability in the CGI program that could allow an authenticated attacker to execute OS commands via a crafted HTTP request.
Labels
CISA KEV context
Vendor / productZyxel DSL CPE Devices
Added2025-02-11
Due date2025-03-04
6 recorded
Relationships
2 external