CVE-2024-42059

🗓️ 03 Sep 2024 01:51:20Reported by ZyxelType

Command injection in Zyxel ATP, USG FLEX, and USG20(W)-VPN series firmware

Reporter	Title	Published	Views	Family All 12
BDU FSTEC	The vulnerability of the File Transfer Protocol (FTP) implementation in the microprogrammed network devices of Zyxel ATP, USG FLEX, and USG FLEX 50(W)/USG20(W)-VPN allows a perpetrator to execute arbitrary commands.	11 Sep 202400:00	–	bdu_fstec
Circl	CVE-2024-42059	3 Sep 202404:55	–	circl
CNNVD	Zyxel多款产品安全漏洞	3 Sep 202400:00	–	cnnvd
Cvelist	CVE-2024-42059	3 Sep 202401:51	–	cvelist
EUVD	EUVD-2024-39427	3 Oct 202520:07	–	euvd
NCSC	Vulnerabilities fixed in Zyxel Flex and USG Firewalls	3 Sep 202409:51	–	ncsc
NVD	CVE-2024-42059	3 Sep 202402:15	–	nvd
Positive Technologies	PT-2024-6026 · Zyxel · Zyxel Usg Flex Series +3	29 Jul 202400:00	–	ptsecurity
RedhatCVE	CVE-2024-42059	5 Feb 202502:27	–	redhatcve
The Hacker News	Zyxel Patches Critical OS Command Injection Flaw in Access Points and Routers	4 Sep 202411:27	–	thn

NVD

Node

zyxel zldRange5.00–5.39

AND

zyxel atp100Match-

zyxel atp100wMatch-

zyxel atp200Match-

zyxel atp500Match-

zyxel atp700Match-

zyxel atp800Match-

Node

zyxel zldRange5.00–5.39

AND

zyxel usg_flex_100Match-

zyxel usg_flex_100axMatch-

zyxel usg_flex_100wMatch-

zyxel usg_flex_200Match-

zyxel usg_flex_50Match-

zyxel usg_flex_500Match-

zyxel usg_flex_50wMatch-

zyxel usg_flex_700Match-

Node

zyxel zldRange5.00–5.39

AND

zyxel usg_20w-vpnMatch-

[
  {
    "defaultStatus": "unaffected",
    "product": "ATP series firmware",
    "vendor": "Zyxel",
    "versions": [
      {
        "status": "affected",
        "version": "versions V5.00 through V5.38"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "USG FLEX series firmware",
    "vendor": "Zyxel",
    "versions": [
      {
        "status": "affected",
        "version": "versions V5.00 through V5.38"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "USG FLEX 50(W) series firmware",
    "vendor": "Zyxel",
    "versions": [
      {
        "status": "affected",
        "version": "versions V5.00 through V5.38"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "USG20(W)-VPN series firmware",
    "vendor": "Zyxel",
    "versions": [
      {
        "status": "affected",
        "version": "versions V5.00 through V5.38"
      }
    ]
  }
]

Source	Link
zyxel	www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-multiple-vulnerabilities-in-firewalls-09-03-2024

13 Dec 2024 16:14Current

7.7High risk

Vulners AI Score7.7

CVSS 3.17.2

EPSS0.00883

SSVC

CWE-78