CVE-2024-42057

🗓️ 03 Sep 2024 01:43:28Reported by ZyxelType

cve🔗 web.nvd.nist.gov📰️ 5 Media mentions👁 103 Views

Command injection in Zyxel ATP series IPSec VPN feature

Reporter	Title	Published	Views	Family All 14
BDU FSTEC	The vulnerability of Zyxel Ethernet switches with microprogrammed software in the ATP, USG FLEX, and USG FLEX 50(W)/USG20(W)-VPN series lies in the lack of measures to neutralize special elements used in the operating commands. This allows attackers to execute arbitrary commands.	5 Sep 202400:00	–	bdu_fstec
Circl	CVE-2024-42057	3 Sep 202404:55	–	circl
CNNVD	Zyxel多款产品操作系统命令注入漏洞	3 Sep 202400:00	–	cnnvd
Cvelist	CVE-2024-42057	3 Sep 202401:43	–	cvelist
EUVD	EUVD-2024-39425	3 Oct 202520:07	–	euvd
NCSC	Vulnerabilities fixed in Zyxel Flex and USG Firewalls	3 Sep 202409:51	–	ncsc
NVD	CVE-2024-42057	3 Sep 202402:15	–	nvd
Positive Technologies	PT-2024-5902	2 Sep 202400:00	–	ptsecurity
RedhatCVE	CVE-2024-42057	5 Feb 202502:29	–	redhatcve
The Hacker News	Zyxel Patches Critical OS Command Injection Flaw in Access Points and Routers	4 Sep 202411:27	–	thn

NVD

Node

zyxel zldRange4.32–5.39

AND

zyxel atp100Match-

zyxel atp100wMatch-

zyxel atp200Match-

zyxel atp500Match-

zyxel atp700Match-

zyxel atp800Match-

Node

zyxel zldRange4.50–5.39

AND

zyxel usg_flex_100Match-

zyxel usg_flex_100axMatch-

zyxel usg_flex_100wMatch-

zyxel usg_flex_200Match-

zyxel usg_flex_50Match-

zyxel usg_flex_500Match-

zyxel usg_flex_700Match-

Node

zyxel zldRange4.16–5.39

AND

zyxel usg_flex_50wMatch-

Node

zyxel zldRange4.16–5.39

AND

zyxel usg_20w-vpnMatch-

[
  {
    "defaultStatus": "unaffected",
    "product": "ATP series firmware",
    "vendor": "Zyxel",
    "versions": [
      {
        "status": "affected",
        "version": "versions V4.32 through V5.38"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "USG FLEX series firmware",
    "vendor": "Zyxel",
    "versions": [
      {
        "status": "affected",
        "version": "versions V4.50 through V5.38"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "USG FLEX 50(W) series firmware",
    "vendor": "Zyxel",
    "versions": [
      {
        "status": "affected",
        "version": "versions V4.16 through V5.38"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "USG20(W)-VPN series firmware",
    "vendor": "Zyxel",
    "versions": [
      {
        "status": "affected",
        "version": "versions V4.16 through V5.38"
      }
    ]
  }
]

Source	Link
zyxel	www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-multiple-vulnerabilities-in-firewalls-09-03-2024

17 Jun 2026 07:48Current

8.2High risk

Vulners AI Score8.2

CVSS 3.18.1

EPSS0.0132

SSVC

CWE-78