VulnerabilitycriticalExploited in the wild

Zyxel CPE Devices Face Active Exploitation Due to Unpatched CVE-2024

The Hacker Newsby @TheHackersNewsFeb 5, 2025 · 04:14 UTC (Feb 5, 2025)3 min read2 · 1 read

Read at thehackernews.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2024-40891 CVE-2024-40890 CVE-2024-57726 CVE-2024-57727 CVE-2024-57728 CVE-2025-0890

Tags: cve-2024-40891 cve-2024-40890 cve-2024-57726 cve-2024-57727 cve-2024-57728 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2024-40891 +1 related CVE CVE-2024-40890	Post-Authentication OS Command Injection in Zyxel DSL CPE Devices	8.8	23%	KEV	Feb 4, 2025 KEV Feb 11, 2025
CVE-2024-57726 +2 related CVEs CVE-2024-57727 CVE-2024-57728	Missing-Authorization Privilege Escalation in SimpleHelp Remote Support <= 5.5.7	9.9 group max	66%	KEVRansomware	Jan 15, 2025 KEV Apr 24, 2026
CVE-2025-0890	UNSUPPORTED WHEN ASSIGNED Insecure default credentials for the Telnet function in the legacy DSL CPE Zyxel VMG4325-B10A firmware version…	9.8	14%		Feb 4, 2025

From the original article

3 min read at thehackernews.com

 Ravie Lakshmanan  Jan 29, 2025 Vulnerability / Network Security Cybersecurity researchers are warning that a critical zero-day vulnerability impacting Zyxel CPE Series devices is seeing active exploitation attempts in the wild.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.