Unpatched Zyxel Vulnerability: Hackers Say “Thanks for the Free Pass!”
Hackers are having a field day with the unpatched CVE-2024-40891 vulnerability in Zyxel CPE Series devices. This telnet-based flaw allows them to execute arbitrary commands, turning your device into their personal playground. With no patch in sight, it’s time to batten down the network hatches and monitor those telnet requests!
Hot Take:
Ah, the sweet serenade of unpatched vulnerabilities! Zyxel’s CPE Series devices are currently the belle of the ball in the hacker community, thanks to a command injection vulnerability that’s been left wide open since last July. It’s like leaving your front door open and wondering why your house is full of raccoons. Come on, Zyxel, give us a patch and make home security great again!
Key Points:
- Hackers are exploiting the unpatched CVE-2024-40891 vulnerability in Zyxel CPE Series devices.
- The flaw enables execution of arbitrary commands via the ‘supervisor’ or ‘zyuser’ accounts.
- No security patch or public disclosure from Zyxel as of yet, despite ongoing attacks.
- GreyNoise and VulnCheck confirm exploitation activity from multiple IP addresses.
- Over 1,500 devices exposed, mostly in the Philippines, Turkey, UK, France, and Italy.
Already a member? Log in here