ZeroDay Findings
Sign inSign up

Findings

CVE-2024-40891

Zyxel DSL CPE OS Command Injection Vulnerability

Published Feb 4, 2025 · updated Jun 17, 2026 · zyxel vmg1312-b10a firmware

**UNSUPPORTED WHEN ASSIGNED** A post-authentication command injection vulnerability in the management commands of the legacy DSL CPE Zyxel VMG4325-B10A firmware version 1.00(AAFR.4)C0_20170615 could allow an authenticated attacker to execute operating system (OS) commands on an affected device via Telnet.

Timeline

Detection, updates, and resolution for this record.

  1. Feb 4, 2025 · Catalog

    Detected

    **UNSUPPORTED WHEN ASSIGNED** A post-authentication command injection vulnerability in the management commands of the legacy DSL CPE Zyxel VMG4325-B10A firmware version 1.00(AAFR.4)C0_20170615 could allow an authenticated attacker to execute operating system (OS) commands on an affected device via Telnet.

  2. Feb 11, 2025 · CISA KEV

    Known exploited

    The impacted product could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization if a current mitigation is unavailable.

  3. Mar 4, 2025 · CISA KEV

    Remediation due

    The impacted product could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization if a current mitigation is unavailable.

  4. Jun 17, 2026 · Catalog

    Updated

    **UNSUPPORTED WHEN ASSIGNED** A post-authentication command injection vulnerability in the management commands of the legacy DSL CPE Zyxel VMG4325-B10A firmware version 1.00(AAFR.4)C0_20170615 could allow an authenticated attacker to execute operating system (OS) commands on an affected device via Telnet.

Required action

The impacted product could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization if a current mitigation is unavailable.

CISA due date Mar 4, 2025

Affected

  • cpe zyxel/sbg3300-n000 firmwareversion unspecified
  • cpe zyxel/sbg3300-nb00 firmwareversion unspecified
  • cpe zyxel/vmg1312-b10a firmwareversion unspecified
  • cpe zyxel/vmg1312-b10b firmwareversion unspecified
  • cpe zyxel/vmg1312-b10e firmwareversion unspecified
  • cpe zyxel/vmg3312-b10a firmwareversion unspecified
  • cpe zyxel/vmg3313-b10a firmwareversion unspecified
  • cpe zyxel/vmg3926-b10b firmwareversion unspecified
  • cpe zyxel/vmg4325-b10a firmwareversion unspecified
  • cpe zyxel/vmg4380-b10a firmwareversion unspecified
  • cpe zyxel/vmg8324-b10a firmwareversion unspecified
  • cpe zyxel/vmg8924-b10a firmwareversion unspecified
  • vendor Zyxel DSL CPE Devicesversion unspecified

Sources

  • CISA KEVCVE-2024-40891

    Multiple Zyxel DSL CPE devices contain a post-authentication command injection vulnerability in the management commands that could allow an authenticated attacker to execute OS commands via Telnet.

    cisa.gov
  • CVE.orgCVE-2024-40891

    Official CVE identifier

    cve.org
  • FIRST EPSSCVE-2024-40891

    30-day exploitation probability 21.7%

    first.org
  • NIST NVDCVE-2024-40891

    **UNSUPPORTED WHEN ASSIGNED** A post-authentication command injection vulnerability in the management commands of the legacy DSL CPE Zyxel VMG4325-B10A firmware version 1.00(AAFR.4)C0_20170615 could allow an authenticated attacker to execute operating system (OS) commands on an a

    nvd.nist.gov

References