peter bassill · operator
$ cve CVE-2024-40890 JSON

CVE-2024-40890 KEV

8.8
HIGH · CVSS 3.1 · EPSS 20.7% (pctl 97)

Patch first

On CISA KEV — known exploited in the wild, due 2025-03-04.

Description

**UNSUPPORTED WHEN ASSIGNED** A post-authentication command injection vulnerability in the CGI program of the legacy DSL CPE Zyxel VMG4325-B10A firmware version 1.00(AAFR.4)C0_20170615 could allow an authenticated attacker to execute operating system (OS) commands on an affected device by sending a crafted HTTP POST request.

Scoring

CVSS8.8 (HIGH, v3.1)
VectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS20.7% — more likely to be exploited than 97% of all CVEs
WeaknessCWE-78
On CISA KEVyes — remediate by 2025-03-04
Public exploitnone known
Published2025-02-04
Last modified2026-06-17

CISA KEV

NameZyxel DSL CPE OS Command Injection Vulnerability
Added2025-02-11
Due2025-03-04
Vendor / productZyxel / DSL CPE Devices
Ransomware usenone reported

Affected (27)

VendorProduct
zyxelsbg3300-n000
zyxelsbg3300-n000 firmware
zyxelsbg3300-nb00
zyxelsbg3300-nb00 firmware
zyxelsbg3500-n000 firmware
zyxelsbg3500-nb00
zyxelsbg3500-nb00 firmware
zyxelvmg1312-b10a
zyxelvmg1312-b10a firmware
zyxelvmg1312-b10b
zyxelvmg1312-b10b firmware
zyxelvmg1312-b10e
zyxelvmg1312-b10e firmware
zyxelvmg3312-b10a
zyxelvmg3312-b10a firmware
zyxelvmg3313-b10a
zyxelvmg3313-b10a firmware
zyxelvmg3926-b10b
zyxelvmg3926-b10b firmware
zyxelvmg4325-b10a
zyxelvmg4325-b10a firmware
zyxelvmg4380-b10a
zyxelvmg4380-b10a firmware
zyxelvmg8324-b10a
zyxelvmg8324-b10a firmware
zyxelvmg8924-b10a
zyxelvmg8924-b10a firmware

References

→ the Explorer  ·  watch your stack  ·  NVD