CVE-2024-40891

EUVD-2024-38851
**UNSUPPORTED WHEN ASSIGNED**
A post-authentication command injection vulnerability in the management commands of the legacy DSL CPE Zyxel VMG4325-B10A firmware version 1.00(AAFR.4)C0_20170615 could allow an authenticated attacker to execute operating system (OS) commands on an affected device via Telnet.
OS Command Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
8.8 HIGH
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
ZyxelCNA
8.8 HIGH
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 97%
Affected Products (NVD)
VendorProductVersion
zyxelvmg1312-b10a_firmware
-
zyxelvmg1312-b10b_firmware
-
zyxelvmg1312-b10e_firmware
-
zyxelvmg3312-b10a_firmware
-
zyxelvmg3313-b10a_firmware
-
zyxelvmg3926-b10b_firmware
-
zyxelvmg4325-b10a_firmware
-
zyxelvmg4380-b10a_firmware
-
zyxelvmg8324-b10a_firmware
-
zyxelvmg8924-b10a_firmware
-
zyxelsbg3300-n000_firmware
-
zyxelsbg3300-nb00_firmware
-
zyxelsbg3500-n000_firmware
-
zyxelsbg3500-nb00_firmware
-
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-command-injection-and-insecure-default-credentials-vulnerabilities-in-certain-legacy-dsl-cpe-02-04-2025
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-40891