peter bassill · operator
$ cve CVE-2025-0890 JSON

CVE-2025-0890

9.8
CRITICAL · CVSS 3.1 · EPSS 13.5% (pctl 96)

Patch early

EPSS 13.5% — above the 10% action threshold.

Description

**UNSUPPORTED WHEN ASSIGNED** Insecure default credentials for the Telnet function in the legacy DSL CPE Zyxel VMG4325-B10A firmware version 1.00(AAFR.4)C0_20170615 could allow an attacker to log in to the management interface if the administrators have the option to change the default credentials but fail to do so.

Scoring

CVSS9.8 (CRITICAL, v3.1)
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS13.54% — more likely to be exploited than 96% of all CVEs
WeaknessCWE-287
On CISA KEVno
Public exploitnone known
Published2025-02-04
Last modified2026-06-17

Affected (28)

VendorProduct
zyxelsbg3300-n000
zyxelsbg3300-n000 firmware
zyxelsbg3300-nb00
zyxelsbg3300-nb00 firmware
zyxelsbg3500-n000
zyxelsbg3500-n000 firmware
zyxelsbg3500-nb00
zyxelsbg3500-nb00 firmware
zyxelvmg1312-b10a
zyxelvmg1312-b10a firmware
zyxelvmg1312-b10b
zyxelvmg1312-b10b firmware
zyxelvmg1312-b10e
zyxelvmg1312-b10e firmware
zyxelvmg3312-b10a
zyxelvmg3312-b10a firmware
zyxelvmg3313-b10a
zyxelvmg3313-b10a firmware
zyxelvmg3926-b10b
zyxelvmg3926-b10b firmware
zyxelvmg4325-b10a
zyxelvmg4325-b10a firmware
zyxelvmg4380-b10a
zyxelvmg4380-b10a firmware
zyxelvmg8324-b10a
zyxelvmg8324-b10a firmware
zyxelvmg8924-b10a
zyxelvmg8924-b10a firmware

References

→ the Explorer  ·  watch your stack  ·  NVD