What’s Vulnerable › Vulnerabilities

CVE-2024-40891: Zyxel DSL CPE OS Command Injection Vulnerability

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: yes — in CISA KEV since 2025-02-11
• EPSS: 22.9% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-02-04 · updated 2026-06-17
• Weakness: CWE-78

Description

**UNSUPPORTED WHEN ASSIGNED** A post-authentication command injection vulnerability in the management commands of the legacy DSL CPE Zyxel VMG4325-B10A firmware version 1.00(AAFR.4)C0_20170615 could allow an authenticated attacker to execute operating system (OS) commands on an affected device via Telnet.

Affected products

• Zyxel Sbg3300-N000 Firmware: all versions
• Zyxel Sbg3300-Nb00 Firmware: all versions
• Zyxel Sbg3500-N000 Firmware: all versions
• Zyxel Sbg3500-Nb00 Firmware: all versions
• Zyxel Vmg1312-B10A Firmware: all versions
• Zyxel Vmg1312-B10B Firmware: all versions
• Zyxel Vmg1312-B10E Firmware: all versions
• Zyxel Vmg3312-B10A Firmware: all versions
• Zyxel Vmg3313-B10A Firmware: all versions
• Zyxel Vmg3926-B10B Firmware: all versions
• Zyxel VMG4325-B10A firmware: all versions
• Zyxel Vmg4380-B10A Firmware: all versions
• Zyxel Vmg8324-B10A Firmware: all versions
• Zyxel Vmg8924-B10A Firmware: all versions

References

• https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-command-injection-and-insecure-default-credentials-vulnerabilities-in-certain-legacy-dsl-cpe-02-04-2025
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-40891

Get alerted when CVE-2024-40891 or the next vulnerability affects your stack