Note:
This project will be discontinued after December 13, 2021. [more]
Product:
Vmg1312\-B10a_firmware
(Zyxel)| Repositories |
Unknown: This might be proprietary software. |
| #Vulnerabilities | 3 |
| Date | Id | Summary | Products | Score | Patch | Annotated |
|---|---|---|---|---|---|---|
| 2025-02-04 | CVE-2024-40890 | **UNSUPPORTED WHEN ASSIGNED** A post-authentication command injection vulnerability in the CGI program of the legacy DSL CPE Zyxel VMG4325-B10A firmware version 1.00(AAFR.4)C0_20170615 could allow an authenticated attacker to execute operating system (OS) commands on an affected device by sending a crafted HTTP POST request. | Sbg3300\-N000_firmware, Sbg3300\-Nb00_firmware, Sbg3500\-N000_firmware, Sbg3500\-Nb00_firmware, Vmg1312\-B10a_firmware, Vmg1312\-B10b_firmware, Vmg1312\-B10e_firmware, Vmg3312\-B10a_firmware, Vmg3313\-B10a_firmware, Vmg3926\-B10b_firmware, Vmg4325\-B10a_firmware, Vmg4380\-B10a_firmware, Vmg8324\-B10a_firmware, Vmg8924\-B10a_firmware | 8.8 | ||
| 2025-02-04 | CVE-2024-40891 | **UNSUPPORTED WHEN ASSIGNED** A post-authentication command injection vulnerability in the management commands of the legacy DSL CPE Zyxel VMG4325-B10A firmware version 1.00(AAFR.4)C0_20170615 could allow an authenticated attacker to execute operating system (OS) commands on an affected device via Telnet. | Sbg3300\-N000_firmware, Sbg3300\-Nb00_firmware, Sbg3500\-N000_firmware, Sbg3500\-Nb00_firmware, Vmg1312\-B10a_firmware, Vmg1312\-B10b_firmware, Vmg1312\-B10e_firmware, Vmg3312\-B10a_firmware, Vmg3313\-B10a_firmware, Vmg3926\-B10b_firmware, Vmg4325\-B10a_firmware, Vmg4380\-B10a_firmware, Vmg8324\-B10a_firmware, Vmg8924\-B10a_firmware | 8.8 | ||
| 2017-09-27 | CVE-2015-7256 | ZyXEL NWA1100-N, NWA1100-NH, NWA1121-NI, NWA1123-AC, and NWA1123-NI access points; P-660HN-51, P-663HN-51, VMG1312-B10A, VMG1312-B30A, VMG1312-B30B, VMG4380-B10A, VMG8324-B10A, VMG8924-B10A, VMG8924-B30A, and VSG1435-B101 DSL CPEs; PMG5318-B20A GPONs; SBG3300-N000, SBG3300-NB00, and SBG3500-N000 small business gateways; GS1900-8 and GS1900-24 switches; and C1000Z, Q1000, FR1000Z, and P8702N project models use non-unique X.509 certificates and SSH host keys. | C1000z_firmware, Fr1000z_firmware, Gs1900\-24_firmware, Gs1900\-8_firmware, Nwa1100\-N_firmware, Nwa1100\-Nh_firmware, Nwa1121\-Ni_firmware, Nwa1123\-Ac_firmware, Nwa1123\-Ni_firmware, P8702n_firmware, P\-660hn\-51_firmware, P\-663hn\-51_firmware, Pmg5318\-B20a_firmware, Q1000_firmware, Sbg3300\-N000_firmware, Sbg3300\-Nb00_firmware, Sbg3500\-N000_firmware, Vmg1312\-B10a_firmware, Vmg1312\-B30a_firmware, Vmg1312\-B30b_firmware, Vmg4380\-B10a_firmware, Vmg8324\-B10a_firmware, Vmg8924\-B10a_firmware, Vmg8924\-B30a_firmware, Vsg1435\-B101_firmware | 5.9 |