Login Request a demo
High severity · published Feb 4, 2025
CVE-2024-40891
Zyxel DSL CPE OS Command Injection Vulnerability
In wildKEV
8.8
CVSS
22.9%
EPSS
Yes
On KEV
Description
**UNSUPPORTED WHEN ASSIGNED** A post-authentication command injection vulnerability in the management commands of the legacy DSL CPE Zyxel VMG4325-B10A firmware version 1.00(AAFR.4)C0_20170615 could allow an authenticated attacker to execute operating system (OS) commands on an affected device via Telnet.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)22.9% · higher than 98% of CVEs
Exploited in the wildYes
CISA KEVListed Feb 11, 2025
Federal remediation dueMar 4, 2025
Ransomware campaign useNot known
Affected products
Which versions
VF
VMG4325-B10A firmware · Zyxel
<= 1.00(AAFR.4)C0_20170615 · source: vendor, NVD
SF
Sbg3300-n000 Firmware · Zyxel
All versions, or not specified · source: NVD
SF
Sbg3300-nb00 Firmware · Zyxel
All versions, or not specified · source: NVD
SF
Sbg3500-n000 Firmware · Zyxel
All versions, or not specified · source: NVD
SF
Sbg3500-nb00 Firmware · Zyxel
All versions, or not specified · source: NVD
VF
Vmg1312-b10a Firmware · Zyxel
All versions, or not specified · source: NVD
VF
Vmg1312-b10b Firmware · Zyxel
All versions, or not specified · source: NVD
VF
Vmg1312-b10e Firmware · Zyxel
All versions, or not specified · source: NVD
VF
Vmg3312-b10a Firmware · Zyxel
All versions, or not specified · source: NVD
VF
Vmg3313-b10a Firmware · Zyxel
All versions, or not specified · source: NVD
VF
Vmg3926-b10b Firmware · Zyxel
All versions, or not specified · source: NVD
VF
Vmg4380-b10a Firmware · Zyxel
All versions, or not specified · source: NVD
Affected product
VF
VMG4325-B10A firmware
Zyxel
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-40891
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-40891
CISA KEV catalogue
https://www.cisa.gov/known-exploited-vulnerabilities-catalog
vendor-advisory
https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-command-injection-and-insecure-default-credentials-vulnerabilities-in-certain-legacy-dsl-cpe-02-04-2025
More from VMG4325-B10A firmware
8.8
CVE-2024-40890
Zyxel DSL CPE OS Command Injection Vulnerability
9.8
CVE-2025-0890
**UNSUPPORTED WHEN ASSIGNED** Insecure default credentials for the Telnet function in the legacy DSL CPE Zyxel VMG4325-B10A firmware version 1.00(AAFR.4)C0_20170615 could allow an…