A vulnerability was found in Zyxel ATP, USG FLEX, USG FLEX 50(W) and USG20(W)-VPN up to 5.38. It has been classified as critical. This affects an unknown part. The manipulation leads to os command injection.

This vulnerability is uniquely identified as CVE-2024-42060. It is possible to initiate the attack remotely. There is no exploit available.