CVE•Published 2024-09-03•1 article on news•6 live references•NVD data

CVE-2024-42057

Vulnerability data via CVEDB (Shodan)

CVSS v3.1

8.1

HIGH

EPSS percentile

Exploit Prediction Scoring System · top 30% of all CVEs

Description

A command injection vulnerability in the IPSec VPN feature of Zyxel ATP series firmware versions from V4.32 through V5.38, USG FLEX series firmware versions from V4.50 through V5.38, USG FLEX 50(W) series firmware versions from V4.16 through V5.38, and USG20(W)-VPN series firmware versions from V4.16 through V5.38 could allow an unauthenticated attacker to execute some OS commands on an affected device by sending a crafted username to the vulnerable device. Note that this attack could be successful only if the device was configured in User-Based-PSK authentication mode and a valid user with a long username exceeding 28 characters exists.

Timeline

Published 2024-09-03

External references

NVD MITRE Exploit-DB GitHub PoC trickest/cve VulnCheck

Search for exposed instances

Shodan + Censys queries derived from NVD's CPE data. The vuln tag catches assets Shodan has explicitly linked to this CVE; the product / banner fingerprints find exposed instances even when the vuln tag was never applied (which is common).

Shodan · vuln tag0 hosts

vuln:CVE-2024-42057

Hosts Shodan has explicitly fingerprinted as vulnerable.

More intel sources (5)

Shodan report

vuln:CVE-2024-42057

Country / ASN / product breakdown for the vuln query.

Censys

vulnerabilities.cve_id: CVE-2024-42057

Censys host search filtered to this CVE id.

grep.app

CVE-2024-42057