A vulnerability was found in Zyxel ATP, USG FLEX, USG FLEX 50(W) and USG20(W)-VPN up to 5.38 and classified as critical. Affected by this issue is some unknown functionality of the component FTP. The manipulation leads to os command injection.

This vulnerability is handled as CVE-2024-42059. The attack may be launched remotely. There is no exploit available.