← Database
CVE-2025-0890
CRITICAL
CVSS: 9.8
Published: 2025-02-04
Modified: 2026-06-17
Description
**UNSUPPORTED WHEN ASSIGNED**
Insecure default credentials for the Telnet function in the legacy DSL CPE Zyxel VMG4325-B10A firmware version 1.00(AAFR.4)C0_20170615 could allow an attacker to log in to the management interface if the administrators have the option to change the default credentials but fail to do so.
Affected Platforms
Zyxel Vmg8324-B10A FirmwareZyxel Vmg8324-B10AZyxel Vmg3312-B10A FirmwareZyxel Sbg3300-Nb00 FirmwareZyxel Vmg3926-B10BZyxel Vmg4325-B10A FirmwareZyxel Vmg8924-B10A FirmwareZyxel Vmg4380-B10A FirmwareZyxel Vmg1312-B10BZyxel Vmg1312-B10E
Weakness Type
CWE-287, CWE-522