Zyxel Firewall Flaw Exploited to Unleash Helldown Ransomware Havoc

Red | Vulnerability Report
Download PDF

Zyxel firewalls have been found to contain a critical vulnerability actively exploited in ongoing cyberattacks. Tracked as CVE-2024-11667, this flaw is a directory traversal vulnerability located in the web management interface of the Zyxel ZLD firewall firmware. Exploiting this vulnerability, attackers gain unauthorized access to system files and use the flaw as an entry point to deploy the dangerous Helldown ransomware, causing significant damage to targeted systems.

What’s new on HivePro

Get through updates and upcoming events, and more directly in your inbox