Sbg3500-nb00 Firmware vulnerabilities

3 known vulnerabilities in Sbg3500-nb00 Firmware from Zyxel. 3 are rated high or critical, and 2 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  VMG4325-B10A firmware: Insufficiently Protected Credentials

  CVE-2025-0890Feb 4, 2025ZyxelEPSS 14.3%

  **UNSUPPORTED WHEN ASSIGNED** Insecure default credentials for the Telnet function in the legacy DSL CPE Zyxel VMG4325-B10A firmware version 1.00(AAFR.4)C0_20170615 could allow an attacker to log in to the management interface if the administrators have the op

• 8.8 High severity

  Zyxel DSL CPE OS Command Injection Exploited

  CVE-2024-40891Feb 4, 2025ZyxelEPSS 22.7%

  **UNSUPPORTED WHEN ASSIGNED** A post-authentication command injection vulnerability in the management commands of the legacy DSL CPE Zyxel VMG4325-B10A firmware version 1.00(AAFR.4)C0_20170615 could allow an authenticated attacker to execute operating system (

• 8.8 High severity

  Zyxel DSL CPE OS Command Injection Exploited

  CVE-2024-40890Feb 4, 2025ZyxelEPSS 20.6%

  **UNSUPPORTED WHEN ASSIGNED** A post-authentication command injection vulnerability in the CGI program of the legacy DSL CPE Zyxel VMG4325-B10A firmware version 1.00(AAFR.4)C0_20170615 could allow an authenticated attacker to execute operating system (OS) comm