CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2025-02-04
Zyxel VMG4325-B10A Legacy DSL CPE Telnet Command Injection Vulnerability (CVE-2024-40891) Analysis and Mitigation Guide
[Affected Scope] Legacy and End-of-Life (EOL) Zyxel VMG4325-B10A DSL CPE devices running firmware version 1.00(AAFR.4)C0_20170615.
[Impact] An authenticated attacker can execute arbitrary operating system (OS) commands with root privileges via the Telnet management interface.
[Mitigation] Since the device is unsupported (EOL), immediate replacement of the hardware is highly recommended. Temporarily disable external Telnet access and enforce strong credentials.