Yüksek CISA KEV
CVE-2024-40890: Zyxel DSL CPE Devices: aktif olarak istismar edilen açık
Açıklama (NVD)
Multiple Zyxel DSL CPE devices contain a post-authentication command injection vulnerability in the CGI program that could allow an authenticated attacker to execute OS commands via a crafted HTTP request.
Özet bilgiler
- EPSS
- %20,70 (yüzdelik 98)
- Yama
- Yok / bilinmiyor
- KEV
- Eklenme: 2025-02-11 · Son tarih: 2025-03-04
Gerekli aksiyon: The impacted product could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization if a current mitigation is unavailable.