CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Zyxel VMG4325-B10A Legacy DSL CPE Telnet Command Injection Vulnerability (CVE-2024-40891) Analysis and Mitigation Guide
[Affected Scope] Legacy and End-of-Life (EOL) Zyxel VMG4325-B10A DSL CPE devices running firmware version 1.00(AAFR.4)C0_20170615.
[Impact] An authenticated attacker can execute arbitrary operating system (OS) commands with root privileges via the Telnet management interface.
[Mitigation] Since the device is unsupported (EOL), immediate replacement of the hardware is highly recommended. Temporarily disable external Telnet access and enforce strong credentials.
Juniper ScreenOS Remote Administrative Access Backdoor Vulnerability (CVE-2015-7755) Analysis and Mitigation Guide
[Affected Scope] Juniper ScreenOS versions 6.2.0r15 through 6.2.0r18 and 6.3.0r12 through 6.3.0r20
[Impact] Remote attackers can bypass authentication and gain full administrative (root) access to the firewall via SSH or TELNET using a hardcoded master password
[Mitigation] Immediately upgrade ScreenOS to patched versions (6.3.0r21 or the respective 'b' releases) and disable external SSH/TELNET access