CVE-2025-0890

🗓️ 04 Feb 2025 10:06:56Reported by ZyxelType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 75 Views

Insecure default credentials in Zyxel firmware may allow unauthorized management access.

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2025-0890	4 Feb 202510:16	–	circl
CNNVD	Zyxel VMG4325-B10A 授权问题漏洞	4 Feb 202500:00	–	cnnvd
Cvelist	CVE-2025-0890	4 Feb 202510:06	–	cvelist
EUVD	EUVD-2025-1913	3 Oct 202520:07	–	euvd
NVD	CVE-2025-0890	4 Feb 202511:15	–	nvd
RedhatCVE	CVE-2025-0890	7 Feb 202509:47	–	redhatcve
The Hacker News	Zyxel CPE Devices Face Active Exploitation Due to Unpatched CVE-2024-40891 Vulnerability	29 Jan 202505:11	–	thn
VulnCheck KEV	VulnCheck KEV: CVE-2025-0890	20 Jan 202600:00	–	vulncheck_kev
Vulnrichment	CVE-2025-0890	4 Feb 202510:06	–	vulnrichment
Tenable Nessus	Zyxel Legacy DSL CPE Router Multiple Vulnerabilities	16 Jul 202500:00	–	nessus

NVD

Node

zyxel vmg4325-b10a_firmwareMatch-

AND

zyxel vmg4325-b10aMatch-

Node

zyxel sbg3500-n000_firmwareMatch-

AND

zyxel sbg3500-n000Match-

Node

zyxel vmg1312-b10a_firmwareMatch-

AND

zyxel vmg1312-b10aMatch-

Node

zyxel vmg1312-b10b_firmwareMatch-

AND

zyxel vmg1312-b10bMatch-

Node

zyxel vmg1312-b10e_firmwareMatch-

AND

zyxel vmg1312-b10eMatch-

Node

zyxel vmg3312-b10a_firmwareMatch-

AND

zyxel vmg3312-b10aMatch-

Node

zyxel vmg3313-b10a_firmwareMatch-

AND

zyxel vmg3313-b10aMatch-

Node

zyxel vmg3926-b10b_firmwareMatch-

AND

zyxel vmg3926-b10bMatch-

Node

zyxel vmg4325-b10a_firmwareMatch-

AND

zyxel vmg4325-b10aMatch-

Node

zyxel vmg4380-b10a_firmwareMatch-

AND

zyxel vmg4380-b10aMatch-

Node

zyxel vmg8324-b10a_firmwareMatch-

AND

zyxel vmg8324-b10aMatch-

Node

zyxel vmg8924-b10a_firmwareMatch-

AND

zyxel vmg8924-b10aMatch-

Node

zyxel sbg3300-n000_firmwareMatch-

AND

zyxel sbg3300-n000Match-

Node

zyxel sbg3300-nb00_firmwareMatch-

AND

zyxel sbg3300-nb00Match-

Node

zyxel sbg3500-nb00_firmwareMatch-

AND

zyxel sbg3500-nb00Match-

[
  {
    "defaultStatus": "unaffected",
    "product": "VMG4325-B10A firmware",
    "vendor": "Zyxel",
    "versions": [
      {
        "status": "affected",
        "version": "<= 1.00(AAFR.4)C0_20170615"
      }
    ]
  }
]

Source	Link
zyxel	www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-command-injection-and-insecure-default-credentials-vulnerabilities-in-certain-legacy-dsl-cpe-02-04-2025

15 Dec 2025 21:02Current

7High risk

Vulners AI Score7

CVSS 3.19.8

EPSS0.21668

SSVC

cve identifier default credentials zyxel firmware management interface unauthorized access