CVE-2025-0890

🗓️ 04 Feb 2025 11:15:08Reported by [email protected]Type

Insecure default credentials in Zyxel VMG4325-B10A firmware may allow unauthorized access.

Reporter	Title	Published	Views	Family All 15
GithubExploit	Exploit for Improper Authentication in Zyxel Vmg4325-B10A_Firmware	30 Oct 202617:08	–	githubexploit
BDU FSTEC	Zyxel CPE Series Privilege Escalation	11 Feb 202500:00	–	bdu_fstec
Circl	CVE-2025-0890	4 Feb 202510:16	–	circl
CNNVD	Zyxel VMG4325-B10A authorization issue vulnerability	4 Feb 202500:00	–	cnnvd
CVE	CVE-2025-0890	4 Feb 202510:06	–	cve
Cvelist	CVE-2025-0890	4 Feb 202510:06	–	cvelist
EUVD	EUVD-2025-1913	3 Oct 202520:07	–	euvd
Kitploit	zyxel-p870hn-hardware-hacking	30 Oct 202622:00	–	kitploit
Positive Technologies	PT-2025-4087	4 Feb 202500:00	–	ptsecurity
Rapid7 Vulnerability Database (full)	CVE-2025-0890: Improper Authentication	4 Feb 202500:00	–	rapid7

NVD

Node

AND

zyxel vmg4325-b10a_firmwareMatch-

zyxel vmg4325-b10aMatch-

Node

AND

zyxel sbg3500-n000_firmwareMatch-

zyxel sbg3500-n000Match-

Node

AND

zyxel vmg1312-b10a_firmwareMatch-

zyxel vmg1312-b10aMatch-

Node

AND

zyxel vmg1312-b10b_firmwareMatch-

zyxel vmg1312-b10bMatch-

Node

AND

zyxel vmg1312-b10e_firmwareMatch-

zyxel vmg1312-b10eMatch-

Node

AND

zyxel vmg3312-b10a_firmwareMatch-

zyxel vmg3312-b10aMatch-

Node

AND

zyxel vmg3313-b10a_firmwareMatch-

zyxel vmg3313-b10aMatch-

Node

AND

zyxel vmg3926-b10b_firmwareMatch-

zyxel vmg3926-b10bMatch-

Node

AND

zyxel vmg4325-b10a_firmwareMatch-

zyxel vmg4325-b10aMatch-

Node

AND

zyxel vmg4380-b10a_firmwareMatch-

zyxel vmg4380-b10aMatch-

Node

AND

zyxel vmg8324-b10a_firmwareMatch-

zyxel vmg8324-b10aMatch-

Node

AND

zyxel vmg8924-b10a_firmwareMatch-

zyxel vmg8924-b10aMatch-

Node

AND

zyxel sbg3300-n000_firmwareMatch-

zyxel sbg3300-n000Match-

Node

AND

zyxel sbg3300-nb00_firmwareMatch-

zyxel sbg3300-nb00Match-

Node

AND

zyxel sbg3500-nb00_firmwareMatch-

zyxel sbg3500-nb00Match-

Source	Link
zyxel	www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-command-injection-and-insecure-default-credentials-vulnerabilities-in-certain-legacy-dsl-cpe-02-04-2025

17 Jun 2026 08:27Current

CVSS 3.19.8

EPSS0.14379

SSVC