CVE-2025-0890

🗓️ 04 Feb 2025 10:06:56Reported by ZyxelType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 123 Views

Insecure default credentials in Zyxel firmware may allow unauthorized management access.

Reporter	Title	Published	Views	Family All 15
GithubExploit	Exploit for Improper Authentication in Zyxel Vmg4325-B10A_Firmware	30 Oct 202617:08	–	githubexploit
BDU FSTEC	Zyxel CPE Series Privilege Escalation	11 Feb 202500:00	–	bdu_fstec
Circl	CVE-2025-0890	4 Feb 202510:16	–	circl
CNNVD	Zyxel VMG4325-B10A authorization issue vulnerability	4 Feb 202500:00	–	cnnvd
Cvelist	CVE-2025-0890	4 Feb 202510:06	–	cvelist
EUVD	EUVD-2025-1913	3 Oct 202520:07	–	euvd
Kitploit	zyxel-p870hn-hardware-hacking	30 Oct 202622:00	–	kitploit
NVD	CVE-2025-0890	4 Feb 202511:15	–	nvd
Positive Technologies	PT-2025-4087	4 Feb 202500:00	–	ptsecurity
Rapid7 Vulnerability Database (full)	CVE-2025-0890: Improper Authentication	4 Feb 202500:00	–	rapid7

NVD

Vulners

Node

AND

zyxel vmg4325-b10a_firmwareMatch-

zyxel vmg4325-b10aMatch-

Node

AND

zyxel sbg3500-n000_firmwareMatch-

zyxel sbg3500-n000Match-

Node

AND

zyxel vmg1312-b10a_firmwareMatch-

zyxel vmg1312-b10aMatch-

Node

AND

zyxel vmg1312-b10b_firmwareMatch-

zyxel vmg1312-b10bMatch-

Node

AND

zyxel vmg1312-b10e_firmwareMatch-

zyxel vmg1312-b10eMatch-

Node

AND

zyxel vmg3312-b10a_firmwareMatch-

zyxel vmg3312-b10aMatch-

Node

AND

zyxel vmg3313-b10a_firmwareMatch-

zyxel vmg3313-b10aMatch-

Node

AND

zyxel vmg3926-b10b_firmwareMatch-

zyxel vmg3926-b10bMatch-

Node

AND

zyxel vmg4325-b10a_firmwareMatch-

zyxel vmg4325-b10aMatch-

Node

AND

zyxel vmg4380-b10a_firmwareMatch-

zyxel vmg4380-b10aMatch-

Node

AND

zyxel vmg8324-b10a_firmwareMatch-

zyxel vmg8324-b10aMatch-

Node

AND

zyxel vmg8924-b10a_firmwareMatch-

zyxel vmg8924-b10aMatch-

Node

AND

zyxel sbg3300-n000_firmwareMatch-

zyxel sbg3300-n000Match-

Node

AND

zyxel sbg3300-nb00_firmwareMatch-

zyxel sbg3300-nb00Match-

Node

AND

zyxel sbg3500-nb00_firmwareMatch-

zyxel sbg3500-nb00Match-

[
  {
    "defaultStatus": "unaffected",
    "product": "VMG4325-B10A firmware",
    "vendor": "Zyxel",
    "versions": [
      {
        "status": "affected",
        "version": "<= 1.00(AAFR.4)C0_20170615"
      }
    ]
  }
]

Source	Link
zyxel	www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-command-injection-and-insecure-default-credentials-vulnerabilities-in-certain-legacy-dsl-cpe-02-04-2025

17 Jun 2026 08:27Current

8.4High risk

Vulners AI Score8.4

CVSS 3.19.8

EPSS0.14379

SSVC

cve identifier default credentials zyxel firmware management interface unauthorized access