Zyxel DSL CPE Devices: 2 exploited vulnerabilities (CVE-2024-40890, CVE-2024-40891) ยท updates https://pwn.watch/i/zyxel-dsl-cpe-devices-cve-2024-40890 CVE-2024-40890: Multiple Zyxel DSL CPE devices contain a post-authentication command injection vulnerability in the CGI program that could allow an authenticated attacker to execute OS commands via a crafted HTTP request. CVE-2024-40891: Multiple Zyxel DSL CPE devices contain a post-authentication command injection vulnerability in the management commands that could allow an authenticated attacker to execute OS commands via Telnet. Added to CISA KEV on 2025-02-11. en Tue, 11 Feb 2025 00:00:00 GMT Zyxel DSL CPE Devices: 2 exploited vulnerabilities (CVE-2024-40890, CVE-2024-40891): CISA added CVE-2024-40890 to the KEV catalog (due 2025-03-04). https://pwn.watch/i/zyxel-dsl-cpe-devices-cve-2024-40890 https://pwn.watch/i/zyxel-dsl-cpe-devices-cve-2024-40890#2025-02-11-e51255a9 Tue, 11 Feb 2025 00:00:00 GMT high <p>Zyxel DSL CPE Devices: 2 exploited vulnerabilities (CVE-2024-40890, CVE-2024-40891): CISA added CVE-2024-40890 to the KEV catalog (due 2025-03-04).</p> Zyxel DSL CPE Devices: 2 exploited vulnerabilities (CVE-2024-40890, CVE-2024-40891): CISA added CVE-2024-40891 to the KEV catalog (due 2025-03-04). https://pwn.watch/i/zyxel-dsl-cpe-devices-cve-2024-40890 https://pwn.watch/i/zyxel-dsl-cpe-devices-cve-2024-40890#2025-02-11-ec7cc6d8 Tue, 11 Feb 2025 00:00:00 GMT high <p>Zyxel DSL CPE Devices: 2 exploited vulnerabilities (CVE-2024-40890, CVE-2024-40891): CISA added CVE-2024-40891 to the KEV catalog (due 2025-03-04).</p>