In a security advisory, Zyxel said it released patches for CVE-2024-29972 ... since the devices are past EoD, and with the methodology widely available, it is probably just a matter of time.