Known Exploited Vulnerabilities February 11, 2025 · CISA KEV Catalog

CVE-2024-40891: Zyxel DSL CPE OS Command Injection Vulnerability

Multiple Zyxel DSL CPE devices contain a post-authentication command injection vulnerability in the management commands that could allow an authenticated attacker to execute OS commands via Telnet.

Read the original at CISA KEV Catalog ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2024-40891 Zyxel
Related: CVE-2026-7273: Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability Known Exploited Vulnerabilities · Sep 21, 2026
CVE-2024-40890: Zyxel DSL CPE OS Command Injection Vulnerability Known Exploited Vulnerabilities · Feb 11, 2025
CVE-2024-11667: Zyxel Multiple Firewalls Path Traversal Vulnerability Known Exploited Vulnerabilities · Dec 03, 2024