CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Zyxel VMG4325-B10A Legacy DSL CPE Telnet Command Injection Vulnerability (CVE-2024-40891) Analysis and Mitigation Guide
[Affected Scope] Legacy and End-of-Life (EOL) Zyxel VMG4325-B10A DSL CPE devices running firmware version 1.00(AAFR.4)C0_20170615.
[Impact] An authenticated attacker can execute arbitrary operating system (OS) commands with root privileges via the Telnet management interface.
[Mitigation] Since the device is unsupported (EOL), immediate replacement of the hardware is highly recommended. Temporarily disable external Telnet access and enforce strong credentials.
Zyxel VMG4325-B10A Legacy DSL CPE CGI Program Remote Command Injection Vulnerability (CVE-2024-40890) Analysis and Mitigation Guide
[Affected Scope] Zyxel VMG4325-B10A firmware version 1.00(AAFR.4)C0_20170615 and prior
[Impact] An authenticated attacker can execute arbitrary operating system (OS) commands with system privileges by sending a crafted HTTP POST request to the CGI program
[Mitigation] Since this is an end-of-life (EOL) legacy device, immediate hardware replacement or strict access control restricting WAN-side management access is highly recommended