Is CVE-2024-42057 actively exploited?

Yes. CVE-2024-42057 is listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, which means exploitation in the wild has been confirmed.

Can CVE-2024-42057 be exploited remotely?

The attack vector of CVE-2024-42057 has not been classified yet.

What is the CVSS score of CVE-2024-42057?

CVE-2024-42057 has not received a CVSS score yet.

HOME VULNERABILITIESCVE-2024-42057

UNKNOWNCISA KEVIN THE WILD

CVE-2024-42057

Published: April 11, 2026

Official Description

A command injection vulnerability in the IPSec VPN feature of Zyxel ATP series firmware versions from V4.32 through V5.38, USG FLEX series firmware versions from V4.50 through V5.38, USG FLEX 50(W) series firmware versions from V4.16 through V5.38, and USG20(W)-VPN series firmware versions from V4.16 through V5.38 could allow an unauthenticated attacker to execute some OS commands on an affected device by sending a crafted username to the vulnerable device. Note that this attack could be successful only if the device was configured in User-Based-PSK authentication mode and a valid user with a long username exceeding 28 characters exists.

NVD Source

Technical Analysis

CVE-2024-42057 requires local access, meaning attackers must already have a foothold on the target system.

Exploitation requires some privileges, which limits the exposure to scenarios where an attacker has already gained initial access.

CISA has added CVE-2024-42057 to the Known Exploited Vulnerabilities (KEV) catalog, confirming active exploitation in the wild. U.S. federal agencies are required to patch this within the mandated timeframe, and all organizations should treat remediation as urgent.