Export limit exceeded: 425740 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2025-0890

**UNSUPPORTED WHEN ASSIGNED** Insecure default credentials for the Telnet function in the legacy DSL CPE Zyxel VMG4325-B10A firmware version 1.00(AAFR.4)C0_20170615 could allow an attacker to log in to the management interface if the administrators have the option to change the default credentials but fail to do so.

CVSS 3.1 · 9.8 Critical EPSS 14.3% KEV · Not listed
Vendors
Zyxel
Products
Sbg3300-n000 Sbg3300-n000 Firmware Sbg3300-nb00 and 25 more
CVE-2024-40890

**UNSUPPORTED WHEN ASSIGNED** A post-authentication command injection vulnerability in the CGI program of the legacy DSL CPE Zyxel VMG4325-B10A firmware version 1.00(AAFR.4)C0_20170615 could allow an authenticated attacker to execute operating system (OS) commands on an affected device by sending a crafted HTTP POST request.

CVSS 3.1 · 8.8 High EPSS 20.6% KEV · Listed
Vendors
Zyxel
Products
Sbg3300-n000 Sbg3300-n000 Firmware Sbg3300-nb00 and 24 more
CVE-2024-40891

**UNSUPPORTED WHEN ASSIGNED** A post-authentication command injection vulnerability in the management commands of the legacy DSL CPE Zyxel VMG4325-B10A firmware version 1.00(AAFR.4)C0_20170615 could allow an authenticated attacker to execute operating system (OS) commands on an affected device via Telnet.

CVSS 3.1 · 8.8 High EPSS 22.7% KEV · Listed
Vendors
Zyxel
Products
Sbg3300-n000 Sbg3300-n000 Firmware Sbg3300-nb00 and 24 more