target entity

DSL CPE Devices

2 source-linked records in the current knowledge graph.

Feb 11, 2025high

CVE-2024-40891: Zyxel DSL CPE OS Command Injection Vulnerability

Multiple Zyxel DSL CPE devices contain a post-authentication command injection vulnerability in the management commands that could allow an authenticated attacker to execute OS commands via Telnet. Required action: The impacted product could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization if a current mitigation is unavailable.

CVE-2024-40891EPSS 22.0%DSL CPE DevicesZyxel

CISA KEV ↗ · unattributed attribution

Feb 11, 2025high

CVE-2024-40890: Zyxel DSL CPE OS Command Injection Vulnerability

Multiple Zyxel DSL CPE devices contain a post-authentication command injection vulnerability in the CGI program that could allow an authenticated attacker to execute OS commands via a crafted HTTP request. Required action: The impacted product could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization if a current mitigation is unavailable.

CVE-2024-40890EPSS 22.4%DSL CPE DevicesZyxel

CISA KEV ↗ · unattributed attribution