Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools

sbg3300-nb00

Source -

NVD

CNA CVEs -

0

ADP CVEs -

0

CISA CVEs -

0

NVD CVEs -

4
Related CVEsRelated VendorsRelated AssignersReports
4Vulnerabilities found
CVE-2025-0890
Assigner-Zyxel Corporation
ShareView Details
Assigner-Zyxel Corporation
CVSS Score-9.8||CRITICAL
EPSS-13.54% / 96.05%
||
7 Day CHG~0.00%
Published-04 Feb, 2025 | 10:06
Updated-15 Dec, 2025 | 21:02
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

**UNSUPPORTED WHEN ASSIGNED** Insecure default credentials for the Telnet function in the legacy DSL CPE Zyxel VMG4325-B10A firmware version 1.00(AAFR.4)C0_20170615 could allow an attacker to log in to the management interface if the administrators have the option to change the default credentials but fail to do so.

Action-Not Available
Vendor-Zyxel Networks Corporation
Product-vmg3312-b10asbg3300-n000_firmwarevmg3313-b10a_firmwarevmg1312-b10e_firmwarevmg8924-b10avmg1312-b10b_firmwarevmg3926-b10bvmg4380-b10asbg3300-n000vmg1312-b10a_firmwarevmg3312-b10a_firmwarevmg1312-b10evmg8924-b10a_firmwarevmg3313-b10asbg3500-n000_firmwarevmg4325-b10a_firmwaresbg3500-n000sbg3500-nb00_firmwarevmg3926-b10b_firmwarevmg8324-b10a_firmwaresbg3500-nb00sbg3300-nb00_firmwarevmg1312-b10bsbg3300-nb00vmg8324-b10avmg1312-b10avmg4380-b10a_firmwarevmg4325-b10aVMG4325-B10A firmware
CWE ID-CWE-287
Improper Authentication
CWE ID-CWE-522
Insufficiently Protected Credentials
CVE-2024-40891
Assigner-Zyxel Corporation
ShareView Details
Assigner-Zyxel Corporation
CVSS Score-8.8||HIGH
EPSS-22.00% / 97.41%
||
7 Day CHG~0.00%
Published-04 Feb, 2025 | 10:02
Updated-27 Oct, 2025 | 17:04
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available
Known KEV||Action Due Date - 2025-03-04||The impacted product could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization if a current mitigation is unavailable.

**UNSUPPORTED WHEN ASSIGNED** A post-authentication command injection vulnerability in the management commands of the legacy DSL CPE Zyxel VMG4325-B10A firmware version 1.00(AAFR.4)C0_20170615 could allow an authenticated attacker to execute operating system (OS) commands on an affected device via Telnet.

Action-Not Available
Vendor-Zyxel Networks Corporation
Product-vmg3312-b10a_firmwarevmg1312-b10b_firmwarevmg3926-b10b_firmwarevmg3926-b10bsbg3300-n000_firmwarevmg4325-b10a_firmwarevmg1312-b10bvmg4325-b10avmg4380-b10avmg4380-b10a_firmwaresbg3300-nb00_firmwaresbg3300-nb00vmg1312-b10e_firmwarevmg1312-b10a_firmwaresbg3500-nb00sbg3500-n000_firmwarevmg3312-b10asbg3500-nb00_firmwarevmg3313-b10a_firmwarevmg1312-b10avmg1312-b10evmg8924-b10a_firmwarevmg8924-b10avmg8324-b10a_firmwarevmg3313-b10avmg8324-b10asbg3300-n000VMG4325-B10A firmwareDSL CPE Devices
CWE ID-CWE-78
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2024-40890
Assigner-Zyxel Corporation
ShareView Details
Assigner-Zyxel Corporation
CVSS Score-8.8||HIGH
EPSS-22.25% / 97.43%
||
7 Day CHG-0.17%
Published-04 Feb, 2025 | 09:55
Updated-27 Oct, 2025 | 17:04
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available
Known KEV||Action Due Date - 2025-03-04||The impacted product could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization if a current mitigation is unavailable.

**UNSUPPORTED WHEN ASSIGNED** A post-authentication command injection vulnerability in the CGI program of the legacy DSL CPE Zyxel VMG4325-B10A firmware version 1.00(AAFR.4)C0_20170615 could allow an authenticated attacker to execute operating system (OS) commands on an affected device by sending a crafted HTTP POST request.

Action-Not Available
Vendor-Zyxel Networks Corporation
Product-vmg3312-b10a_firmwarevmg1312-b10b_firmwarevmg3926-b10b_firmwarevmg3926-b10bsbg3300-n000_firmwarevmg4325-b10a_firmwarevmg1312-b10bvmg4325-b10avmg4380-b10avmg4380-b10a_firmwaresbg3300-nb00_firmwaresbg3300-nb00vmg1312-b10e_firmwarevmg1312-b10a_firmwaresbg3500-nb00sbg3500-n000_firmwarevmg3312-b10asbg3500-nb00_firmwarevmg3313-b10a_firmwarevmg1312-b10avmg1312-b10evmg8924-b10a_firmwarevmg8924-b10avmg8324-b10a_firmwarevmg3313-b10avmg8324-b10asbg3300-n000VMG4325-B10A firmwareDSL CPE Devices
CWE ID-CWE-78
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2015-7256
Assigner-CERT/CC
ShareView Details
Assigner-CERT/CC
CVSS Score-5.9||MEDIUM
EPSS-0.79% / 52.62%
||
7 Day CHG~0.00%
Published-27 Sep, 2017 | 18:00
Updated-13 May, 2026 | 00:24
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

ZyXEL NWA1100-N, NWA1100-NH, NWA1121-NI, NWA1123-AC, and NWA1123-NI access points; P-660HN-51, P-663HN-51, VMG1312-B10A, VMG1312-B30A, VMG1312-B30B, VMG4380-B10A, VMG8324-B10A, VMG8924-B10A, VMG8924-B30A, and VSG1435-B101 DSL CPEs; PMG5318-B20A GPONs; SBG3300-N000, SBG3300-NB00, and SBG3500-N000 small business gateways; GS1900-8 and GS1900-24 switches; and C1000Z, Q1000, FR1000Z, and P8702N project models use non-unique X.509 certificates and SSH host keys.

Action-Not Available
Vendor-n/aZyxel Networks Corporation
Product-p8702n_firmwarevsg1435-b101vmg8924-b10avmg8924-b30a_firmwarevsg1435-b101_firmwarenwa1123-ni_firmwarenwa1100-n_firmwarep-663hn-51_firmwarevmg8924-b10a_firmwarevmg8324-b10a_firmwaresbg3300-n000_firmwarevmg1312-b30anwa1121-ni_firmwaregs1900-8_firmwarec1000znwa1100-nsbg3300-n000p-660hn-51_firmwarenwa1123-acnwa1100-nh_firmwarevmg1312-b10a_firmwarevmg1312-b30b_firmwaresbg3300-nb00_firmwarefr1000z_firmwarevmg1312-b10anwa1121-nisbg3500-n000_firmwareq1000_firmwarepmg5318-b20a_firmwarec1000z_firmwarenwa1123-nivmg8324-b10ap-663hn-51vmg4380-b10aq1000fr1000zp8702ngs1900-24_firmwarep-660hn-51sbg3300-nb00sbg3500-n000vmg1312-b30a_firmwarenwa1123-ac_firmwarevmg8924-b30ags1900-24vmg1312-b30bpmg5318-b20ags1900-8vmg4380-b10a_firmwarenwa1100-nhn/a