**UNSUPPORTED WHEN ASSIGNED**
A post-authentication command injection vulnerability in the CGI program of the legacy DSL CPE Zyxel VMG4325-B10A firmware version 1.00(AAFR.4)C0_20170615 could allow an authenticated attacker to execute operating system (OS) commands on an affected device by sending a crafted HTTP POST request.
Connections 29
has cited scope1 retained · stored CVE-2024-40890 → Zyxel · VMG4325-B10A firmware23fdc4cf-4f15-470e-9bab-df93e048a06d
has environmental constraint1 retained · stored CVE-2024-40890 → zyxel · vmg4325-b10afc04212f-196b-4f57-9c23-7edc6ac0ed98
has environmental constraint1 retained · stored CVE-2024-40890 → zyxel · vmg1312-b10b821bb724-a959-4acc-82db-f3989e6320eb
has environmental constraint1 retained · stored CVE-2024-40890 → zyxel · vmg3313-b10a67fad410-8462-458a-bec6-26edd5e7f7ae
has environmental constraint1 retained · stored CVE-2024-40890 → zyxel · sbg3300-n0004b54e920-a26c-4735-bc43-0575d9478bf4
has environmental constraint1 retained · stored CVE-2024-40890 → zyxel · vmg1312-b10ea448eb8b-f451-4215-b5ef-acebda9af943
has environmental constraint1 retained · stored CVE-2024-40890 → zyxel · vmg8924-b10a305fd345-6cc0-4bc0-ab88-376d5aa1024e
has environmental constraint1 retained · stored CVE-2024-40890 → zyxel · sbg3500-n000_firmwareba912611-d9ac-4000-9e28-95ac8c97298b
has environmental constraint1 retained · stored CVE-2024-40890 → zyxel · sbg3300-nb0048cda8f3-f39d-40b0-8e78-2e25b9241dda
has environmental constraint1 retained · stored CVE-2024-40890 → zyxel · vmg3312-b10a75c4a81a-2947-4207-9513-29bb9817574a
has environmental constraint1 retained · stored CVE-2024-40890 → zyxel · sbg3500-nb0034c4f464-fcc6-462d-bd41-216e62fe9dff
has environmental constraint1 retained · stored CVE-2024-40890 → zyxel · vmg4380-b10a704450d1-ac94-47dc-9d7e-d4b9156f4cc9
has environmental constraint1 retained · stored CVE-2024-40890 → zyxel · vmg8324-b10a8287451c-92b8-4a0d-8d72-bb3d52efb216
has environmental constraint1 retained · stored CVE-2024-40890 → zyxel · vmg1312-b10a0ad0be39-7f0e-4915-afb9-939f4b6ec41a
has environmental constraint1 retained · stored CVE-2024-40890 → zyxel · vmg3926-b10b5b81d925-0e86-4f90-8058-51d88a494536
has vulnerable target scope1 retained · stored CVE-2024-40890 → zyxel · sbg3500-nb00_firmware61e78686-909b-4061-9185-d9e7d2c0c57f
has vulnerable target scope1 retained · stored CVE-2024-40890 → zyxel · vmg8324-b10a_firmware3d922536-ddde-4971-9a11-fa068111385a
has vulnerable target scope1 retained · stored CVE-2024-40890 → zyxel · vmg8924-b10a_firmwareefcbbd46-b9df-4447-ad72-ea88439196ec
has vulnerable target scope1 retained · stored CVE-2024-40890 → zyxel · vmg4380-b10a_firmwaref1f22e81-0681-4345-a875-03caad672b40
has vulnerable target scope1 retained · stored CVE-2024-40890 → zyxel · vmg1312-b10a_firmwared948e5fc-5bac-4e99-8d0c-af173fdbcad6
has vulnerable target scope1 retained · stored CVE-2024-40890 → zyxel · sbg3500-n000_firmwaref493b0a2-57b1-4288-93ba-94936f89587f
has vulnerable target scope1 retained · stored CVE-2024-40890 → zyxel · vmg1312-b10b_firmware14fd9011-b0d7-45e2-a711-9c120a355a0a
has vulnerable target scope1 retained · stored CVE-2024-40890 → zyxel · vmg3312-b10a_firmware2a69b036-96d5-43f3-847f-2ca7f7527645
has vulnerable target scope1 retained · stored CVE-2024-40890 → zyxel · vmg3313-b10a_firmware5309e333-a831-4df0-a4d8-79ab03efce34
has vulnerable target scope1 retained · stored CVE-2024-40890 → zyxel · vmg1312-b10e_firmware938caa8d-dc5c-4627-a244-281d9818eaff
has vulnerable target scope1 retained · stored CVE-2024-40890 → zyxel · sbg3300-nb00_firmware3a4c2b03-322f-4998-9da5-8e7b88687c12
has vulnerable target scope1 retained · stored CVE-2024-40890 → zyxel · vmg3926-b10b_firmware78e72e2e-c06f-4102-b469-d83f8c5074ce
has vulnerable target scope1 retained · stored CVE-2024-40890 → zyxel · sbg3300-n000_firmware0405a359-ead4-416b-96ee-de0d067a24f5
has vulnerable target scope1 retained · stored CVE-2024-40890 → zyxel · vmg4325-b10a_firmware08201ffb-59f9-4cad-886f-d56ae8688952