CVE-2024-40890 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

**UNSUPPORTED WHEN ASSIGNED** A post-authentication command injection vulnerability in the CGI program of the legacy DSL CPE Zyxel VMG4325-B10A firmware version…
High KEV CVSS: 8.8

CVE-2024-40890

**UNSUPPORTED WHEN ASSIGNED**
A post-authentication command injection vulnerability in the CGI program of the legacy DSL CPE Zyxel VMG4325-B10A firmware version 1.00(AAFR.4)C0_20170615 could allow an authenticated attacker to execute operating system (OS) commands on an affected device by sending a crafted HTTP POST request.
Vendor
Zyxel
Product
Vmg1312-b10a Firmware
CWE
CWE-78
Yayın Tarihi
2025-02-04 10:15:08
Güncelleme
2025-10-27 17:04:41
Source Identifier
security@zyxel.com.tw
KEV Date Added
2025-02-11

Kategoriler

CWE-78 Vmg1312-b10a Firmware HIGH Zyxel 2025

Referanslar

https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-command-injection-and-insecure-default-credentials-vulnerabilities-in-certain-legacy-dsl-cpe-02-04-2025 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-40890