AS
Product
ATP series firmware
On CISA KEVExploited in the wildRansomware-linked
13
CVEs
5
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 6Medium 2Low 0
Watch
Add ATP series firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-42057 | 8.1 | Sep 3 | A command injection vulnerability in the IPSec VPN feature of Zyxel ATP series firmware versions from V4.32 through V5.38, USG FLEX series firmware versions from V4.50 through… Affected: versions V4.32 through V5.38 |
| CVE-2024-42058 | 7.5 | Sep 3 | A null pointer dereference vulnerability in Zyxel ATP series firmware versions from V4.32 through V5.38, USG FLEX series firmware versions from V4.50 through V5.38, USG FLEX 50(W)… Affected: versions V4.32 through V5.38 |
| CVE-2026-14818 | 7.2 | Aug 4 | A path traversal vulnerability in the CLI command used to execute configuration files in Zyxel ATP series firmware versions from V4.32 through V5.42 Patch 1, USG FLEX series… Affected: from V4.32 through V5.42 Patch 1 |
| CVE-2024-42060 | 7.2 | Sep 3 | A post-authentication command injection vulnerability in Zyxel ATP series firmware versions from V4.32 through V5.38, USG FLEX series firmware versions from V4.50 through V5.38,… Affected: versions V4.32 through V5.38 |
| CVE-2024-42059 | 7.2 | Sep 3 | A post-authentication command injection vulnerability in Zyxel ATP series firmware versions from V5.00 through V5.38, USG FLEX series firmware versions from V5.00 through V5.38,… Affected: versions V5.00 through V5.38 |
| CVE-2024-7203 | 7.2 | Sep 3 | A post-authentication command injection vulnerability in Zyxel ATP series firmware versions from V4.60 through V5.38 and USG FLEX series firmware versions from V4.60 through V5.38… Affected: versions V4.60 through V5.38 |
Showing 6