CVE-2024-40891
Last modified
CVE-2024-40891 is a high-severity vulnerability rated 8.8/10 on the CVSS scale. **UNSUPPORTED WHEN ASSIGNED** A post-authentication command injection vulnerability in the management commands of the legacy DSL CPE Zyxel VMG4325-B10A firmware version 1.00(AAFR.4)C0_20170615 could allow an authenticated attacker to execute operating system (OS) commands on an affected device via Telnet.. CISA has confirmed active exploitation in the wild. EPSS estimates a 19.41% chance of exploitation in the next 30 days.
Description
**UNSUPPORTED WHEN ASSIGNED** A post-authentication command injection vulnerability in the management commands of the legacy DSL CPE Zyxel VMG4325-B10A firmware version 1.00(AAFR.4)C0_20170615 could allow an authenticated attacker to execute operating system (OS) commands on an affected device via Telnet.
Metrics
Exploitation Status
This vulnerability is listed in CISA’s Known Exploited Vulnerabilities catalog, confirming active exploitation in the wild. Federal agencies must remediate by .
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Zyxel | Vmg1312-B10a Firmware | All versions |
| Zyxel | Vmg1312-B10b Firmware | All versions |
| Zyxel | Vmg1312-B10e Firmware | All versions |
| Zyxel | Vmg3312-B10a Firmware | All versions |
| Zyxel | Vmg3313-B10a Firmware | All versions |
| Zyxel | Vmg3926-B10b Firmware | All versions |
| Zyxel | Vmg4325-B10a Firmware | All versions |
| Zyxel | Vmg4380-B10a Firmware | All versions |
| Zyxel | Vmg8324-B10a Firmware | All versions |
| Zyxel | Vmg8924-B10a Firmware | All versions |
| Zyxel | Sbg3300-N000 Firmware | All versions |
| Zyxel | Sbg3300-Nb00 Firmware | All versions |
| Zyxel | Sbg3500-N000 Firmware | All versions |
| Zyxel | Sbg3500-Nb00 Firmware | All versions |
References
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-40891US Government Resource
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2024-40891?
How severe is CVE-2024-40891?
How do I fix CVE-2024-40891?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2024
- CVE-2024-40884Mattermost versions 9.5.x <= 9.5.7, 9.10.x <= 9.10.0 fail to…2.7
- CVE-2024-40885Use after free in the UEFI firmware of some Intel(R) Server …8.7
- CVE-2024-40886Mattermost versions 9.9.x <= 9.9.1, 9.5.x <= 9.5.7, 9.10.x <…8.8
- CVE-2024-40887Race condition in some Intel(R) PROSet/Wireless WiFi and Kil…6.1
- CVE-2024-4089A DLL hijack vulnerability was reported in Lenovo Super File…7.8
- CVE-2024-40890**UNSUPPORTED WHEN ASSIGNED** A post-authentication command …8.8
- CVE-2024-40892A weak credential vulnerability exists in Firewalla Box Soft…7.1
- CVE-2024-40893Multiple authenticated operating system (OS) command injecti…6.8
- CVE-2024-40895FFRI AMC versions 3.4.0 to 3.5.3 and some OEM products that …6.4
- CVE-2024-40896In libxml2 2.11 before 2.11.9, 2.12 before 2.12.9, and 2.13 …9.1
- CVE-2024-40897Stack-based buffer overflow vulnerability exists in orcparse…6.7
- CVE-2024-40898SSRF in Apache HTTP Server on Windows with mod_rewrite in se…7.5
Are you affected by CVE-2024-40891?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST