CVE Vulnerability Advisory Database

[Affected Scope] Legacy and End-of-Life (EOL) Zyxel VMG4325-B10A DSL CPE devices running firmware version 1.00(AAFR.4)C0_20170615.

[Impact] An authenticated attacker can execute arbitrary operating system (OS) commands with root privileges via the Telnet management interface.

[Mitigation] Since the device is unsupported (EOL), immediate replacement of the hardware is highly recommended. Temporarily disable external Telnet access and enforce strong credentials.

[Affected Scope] Cisco IOS and IOS XE-based Catalyst switches and embedded service modules configured to accept Telnet connections and utilizing CMP

[Impact] Unauthenticated, remote attackers can execute arbitrary code with elevated privileges or cause a device reload by sending malformed CMP-specific Telnet options

[Mitigation] Apply official Cisco software updates immediately, or disable Telnet services and restrict VTY access using infrastructure ACLs

[Affected Scope] Juniper ScreenOS versions 6.2.0r15 through 6.2.0r18 and 6.3.0r12 through 6.3.0r20

[Impact] Remote attackers can bypass authentication and gain full administrative (root) access to the firewall via SSH or TELNET using a hardcoded master password

[Mitigation] Immediately upgrade ScreenOS to patched versions (6.3.0r21 or the respective 'b' releases) and disable external SSH/TELNET access

[Affected Scope] Cisco IOS 12.2(15) and earlier versions

[Impact] Remote attackers can cause a denial of service (refused VTY connections) by exhausting virtual terminal resources using crafted TCP connection requests

[Mitigation] Upgrade to a patched Cisco IOS release, disable Telnet in favor of SSH, and restrict VTY access using Access Control Lists (ACLs)