CVE-2024-42061 | Zyxel ATP/USG FLEX/USG FLEX 50(W)/USG20(W)-VPN up to 5.38 URL dynamic_script.cgi cross site scripting

A vulnerability classified as problematic has been found in Zyxel ATP, USG FLEX, USG FLEX 50(W) and USG20(W)-VPN up to 5.38. Affected is an unknown function of the file dynamic_script.cgi of the component URL Handler. The manipulation leads to cross site scripting.

This vulnerability is traded as CVE-2024-42061. It is possible to launch the attack remotely. There is no exploit available.