Zyxel Vmg3313-b10a Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Zyxel Vmg3313-b10a Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2025-0890 — CVSS 9.8 (critical): **UNSUPPORTED WHEN ASSIGNED** Insecure default credentials for the Telnet function in the legacy DSL CPE Zyxel VMG4325-B10A firmware…
• CVE-2024-40890 — CVSS 8.8 (high) — actively exploited: **UNSUPPORTED WHEN ASSIGNED** A post-authentication command injection vulnerability in the CGI program of the legacy DSL CPE Zyxel…
• CVE-2024-40891 — CVSS 8.8 (high) — actively exploited: **UNSUPPORTED WHEN ASSIGNED** A post-authentication command injection vulnerability in the management commands of the legacy DSL CPE Zyxel…