CVE-2024-40891 in VMG4325-B10Ainformação

Sumário

de MITRE • 04/02/2025

**UNSUPPORTED WHEN ASSIGNED** A post-authentication command injection vulnerability in the management commands of the legacy DSL CPE Zyxel VMG4325-B10A firmware version 1.00(AAFR.4)C0_20170615 could allow an authenticated attacker to execute operating system (OS) commands on an affected device via Telnet.

Once again VulDB remains the best source for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Responsável

Zyxel

Reservar

11/07/2024

Divulgação

04/02/2025

Moderação

aceite

Entrada

VDB-294605

CPE

pronto

EPSS

0.21829

KEV

sim

Atividades

muito baixo

Fontes

MITREhttps://www.cve.org/CVERecord?id=CVE-2024-40891
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2024-40891
CVE Detailshttps://www.cvedetails.com/cve/CVE-2024-40891/

◂ VoltarVisão GeralPróximo ▸

Do you know our Splunk app?

Download it now for free!