Known vulnerabilities in Zyxel CPE Series

Vendor: ZyXEL Communications Corp.
Software: Zyxel CPE Series
Software CPE: cpe:2.3:h:zyxel_communications_corp:zyxel_cpe_series:*:*:*:*:*:*:*:*
Website: https://www.zyxel.com/
Total vulnerabilities: 2
Public exploits: 0
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Zyxel CPE Series Zyxel CPE Series is affected by 2 known vulnerabilities: 1 critical, 1 high Critical High Medium Low

Vulnerabilities (2)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU103459 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2024-40890		 CWE-78 High
No
Exploited
 - 30.01.2025 SB2025013047
#VU103449 - Command injection
CVE-2024-40891		 CWE-77 Critical
No
Exploited
 - 30.01.2025 SB2025013026