Zyxel Vmg4380-b10a Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Zyxel Vmg4380-b10a Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2025-0890 — CVSS 9.8 (critical): **UNSUPPORTED WHEN ASSIGNED** Insecure default credentials for the Telnet function in the legacy DSL CPE Zyxel VMG4325-B10A firmware…
• CVE-2024-40890 — CVSS 8.8 (high) — actively exploited: **UNSUPPORTED WHEN ASSIGNED** A post-authentication command injection vulnerability in the CGI program of the legacy DSL CPE Zyxel…
• CVE-2024-40891 — CVSS 8.8 (high) — actively exploited: **UNSUPPORTED WHEN ASSIGNED** A post-authentication command injection vulnerability in the management commands of the legacy DSL CPE Zyxel…
• CVE-2015-7256 — CVSS 5.9 (medium): ZyXEL NWA1100-N, NWA1100-NH, NWA1121-NI, NWA1123-AC, and NWA1123-NI access points; P-660HN-51, P-663HN-51, VMG1312-B10A, VMG1312-B30A…