CVE-2024-40891: Zyxel DSL CPE OS Command Injection Vulnerability

Published Feb 4, 2025
·
Updated

UNSUPPORTED WHEN ASSIGNED A post-authentication command injection vulnerability in the management commands of the legacy DSL CPE Zyxel VMG4325-B10A firmware version 1.00(AAFR.4)C020170615 could allow an authenticated attacker to execute operating system (OS) commands on an affected device via Telnet.

Other sources

Multiple Zyxel DSL CPE devices contain a post-authentication command injection vulnerability in the management commands that could allow an authenticated attacker to execute OS commands via Telnet.

CISA

Affected Software

30 affected components
Zyxel VMG4325-B10A
Zyxel DSL CPE Devices
All of the following
Zyxel Vmg1312-b10a Firmware
Zyxel VMG1312-B10A
All of the following
Zyxel Vmg1312-b10b Firmware
Zyxel Vmg1312-b10b
All of the following
Zyxel Vmg1312-b10e Firmware
Zyxel Vmg1312-b10e
All of the following
Zyxel Vmg3312-b10a Firmware
Zyxel Vmg3312-b10a
All of the following
Zyxel Vmg3313-b10a Firmware
Zyxel Vmg3313-b10a
All of the following
Zyxel Vmg3926-b10b Firmware
Zyxel Vmg3926-b10b
All of the following
Zyxel VMG4325-B10A firmware
Zyxel VMG4325-B10A
All of the following
Zyxel Vmg4380-b10a Firmware
Zyxel VMG4380-B10A
All of the following
Zyxel Vmg8324-b10a Firmware
Zyxel VMG8324-B10A
All of the following
Zyxel Vmg8924-b10a Firmware
Zyxel VMG8924-B10A
All of the following
Zyxel Sbg3300-n000 Firmware
Zyxel SBG3300-N000
All of the following
Zyxel Sbg3300-nb00 Firmware
Zyxel SBG3300-NB00
All of the following
Zyxel Sbg3500-n000 Firmware
Zyxel Sbg3500-n000 Firmware
All of the following
Zyxel Sbg3500-nb00 Firmware
Zyxel Sbg3500-nb00

Remediation

Recommended actions to resolve this vulnerability, in priority order.

  1. Remove

    Remove Zyxel VMG4325-B10A firmware 1.00(AAFR.4)C0_20170615 from your environment.

    Discontinue product utilization of Zyxel VMG4325-B10A devices running firmware 1.00(AAFR.4)C0_20170615. Remove or replace affected devices from production environments if no current mitigation is available.

Event History

Jan 29, 2025
News Published
via BleepingComputer·02:42 PM
News Published
via BleepingComputer·02:43 PM
News Published
via Dark Reading·07:54 PM
News Published
via Dark Reading·08:05 PM
Feb 4, 2025
CVE Published
via MITRE·10:02 AM
Data Sourced
via MITRE·10:02 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·10:15 AM
DescriptionSeverityWeaknessAffected Software
News Published
via BleepingComputer·09:22 PM
Feb 11, 2025
Known Exploited
via CISA·12:00 AM
Feb 25, 2026
News Published
via BleepingComputer·12:53 PM

Peer vulnerabilities

Found alongside the following vulnerabilities.

Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2024-40891?

The severity of CVE-2024-40891 is considered high due to its potential for command injection by authenticated attackers.

2

How do I fix CVE-2024-40891?

To fix CVE-2024-40891, it is recommended to upgrade to a newer firmware version that addresses this vulnerability.

3

Which devices are affected by CVE-2024-40891?

CVE-2024-40891 specifically affects the Zyxel VMG4325-B10A device running firmware version 1.00(AAFR.4)C0_20170615.

4

What type of vulnerability is CVE-2024-40891?

CVE-2024-40891 is a post-authentication command injection vulnerability.

5

Can CVE-2024-40891 be exploited remotely?

CVE-2024-40891 requires authentication, so it cannot be exploited remotely without valid access credentials.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203