Zyxel Patches Critical Flaws in NAS Devices: Update Now or Risk Cyber Havoc!
Zyxel has patched three high-severity flaws in its NAS devices. The vulnerabilities, CVE-2024-29972, CVE-2024-29973, and CVE-2024-29974, have critical severity scores and need immediate attention. Despite the devices reaching end-of-life, patches are available for those with extended warranty.
Hot Take:
Zyxel is playing a dangerous game of hide and seek with its vulnerabilities, but it looks like the hackers always find a way to win. It’s like giving your house keys to a burglar, then patching up the window they broke to get in. Oops!
Key Points:
- Zyxel patched three critical flaws in its NAS devices: CVE-2024-29972, CVE-2024-29973, and CVE-2024-29974.
- The flaws were discovered in NAS326 and NAS542 models.
- Two additional moderately severe flaws (CVE-2024-29975 and CVE-2024-29976) were also found.
- These devices reached end-of-life status on December 31, 2023, but Zyxel still released patches.
- The vulnerabilities were discovered and demonstrated by Timothy Hjort from Outpost24.
Already a member? Log in here