Zyxel Patches Critical Flaws: Is Your Network Safe or a Hacker’s Playground?
Zyxel has patched a critical OS command injection flaw (CVE-2024-7261) in access points and routers, rated 9.8 on the CVSS scale. This vulnerability could let an attacker execute unauthorized commands via a crafted cookie. Time to update those devices, folks—no one wants a rogue cookie monster in their network!
Hot Take:
Looks like Zyxel’s routers were throwing a wild party, and OS command injection was the uninvited guest crashing it! At least Zyxel decided to play bouncer and kicked them out with some timely software updates. Now, if only D-Link would take notes instead of letting their routers retire in a blaze of vulnerabilities…
Key Points:
- Zyxel addresses critical OS command injection flaw (CVE-2024-7261).
- Chengchao Ai from Fuzhou University discovered the flaw.
- Updates also fix seven other vulnerabilities in Zyxel’s routers and firewalls.
- D-Link’s DIR-846 router won’t receive fixes for its vulnerabilities due to EoL status.
- Users urged to update or replace vulnerable devices immediately.
Already a member? Log in here