Exploit / PoCcriticalExploited in the wild

U.S. CISA adds Microsoft Windows, Zyxel device flaws to its Known Exploited Vulnerabilities catalog

Security Affairsby @securityaffairsFeb 12, 2025 · 08:01 UTC (Feb 12, 2025)2 min read2 · 1 read

Read at securityaffairs.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2024-40891 CVE-2024-40890 CVE-2025-21418 CVE-2025-21391

Tags: cve-2024-40891 cve-2024-40890 cve-2025-21418 cve-2025-21391 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2024-40891 +1 related CVE CVE-2024-40890	Post-Authentication OS Command Injection in Zyxel DSL CPE Devices	8.8	23%	KEV	Feb 4, 2025 KEV Feb 11, 2025
CVE-2025-21418 +1 related CVE CVE-2025-21391	Local Privilege Escalation via Heap Overflow in Windows WinSock AFD Driver	7.8 group max	2%	KEV	Feb 11, 2025 KEV Feb 11, 2025

From the original article

2 min read at securityaffairs.com

U. S. Cybersecurity and Infrastructure Security Agency (CISA) adds Windows, Zyxel device flaws to its Known Exploited Vulnerabilities catalog.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.