CVE-2025-0890
**UNSUPPORTED WHEN ASSIGNED** Insecure default credentials for the Telnet function in the legacy...
UNSUPPORTED WHEN ASSIGNED Insecure default credentials for the Telnet function in the legacy DSL CPE Zyxel VMG4325-B10A firmware version 1.00(AAFR.4)C0_20170615 could allow an attacker to log in to the management interface if the administrators have the option to change the default credentials but fail to do so.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
UNSUPPORTED WHEN ASSIGNED Insecure default credentials for the Telnet function in the legacy DSL CPE Zyxel VMG4325-B10A firmware version 1.00(AAFR.4)C0_20170615 could allow an attacker to log in to the management interface if the administrators have the option to change the default credentials but fail to do so.
- Record
CVE-2025-0890- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-287
- Updated
- 2026-11-02
EUVDEUVD-2025-1913
UNSUPPORTED WHEN ASSIGNED Insecure default credentials for the Telnet function in the legacy DSL CPE Zyxel VMG4325-B10A firmware version 1.00(AAFR.4)C0_20170615 could allow an attacker to log in to the management interface if the administrators have the option to change the default credentials but fail to do so.
- Record
EUVD-2025-1913- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-q2vf-jq2x-689c
**UNSUPPORTED WHEN ASSIGNED** Insecure default credentials for the Telnet function in the legacy...
UNSUPPORTED WHEN ASSIGNED Insecure default credentials for the Telnet function in the legacy DSL CPE Zyxel VMG4325-B10A firmware version 1.00(AAFR.4)C0_20170615 could allow an attacker to log in to the management interface if the administrators have the option to change the default credentials but fail to do so.
- Record
GHSA-q2vf-jq2x-689c- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-287, CWE-522
- Updated
- 2026-11-02
NVD
UNSUPPORTED WHEN ASSIGNED Insecure default credentials for the Telnet function in the legacy DSL CPE Zyxel VMG4325-B10A firmware version 1.00(AAFR.4)C0_20170615 could allow an attacker to log in to the management interface if the administrators have the option to change the default credentials but fail to do so.
- Record
CVE-2025-0890- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-287, CWE-522
- Updated
- 2026-11-02
Affected products
- zyxel vmg4325-b10a firmware
- zyxel sbg3300-n000 firmware
- zyxel sbg3300-nb00 firmware
- zyxel sbg3500-n000 firmware
- zyxel sbg3500-nb00 firmware
- zyxel vmg1312-b10a firmware
- zyxel vmg1312-b10b firmware
- zyxel vmg1312-b10e firmware
- zyxel vmg3312-b10a firmware
- zyxel vmg3313-b10a firmware
- zyxel vmg3926-b10b firmware
- zyxel vmg4380-b10a firmware
Show 2 moreShow less
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| PoC in GitHub | Danyw24/zyxel-p870hn-hardware-hacking | 2026-08-13 |
| PoC in GitHub | krevetkqqq/CVE-2025-0890 | 2026-10-30 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases, published | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, PoC in GitHub |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2025-0890 is a critical vulnerability (CVSS 9.8) in Zyxel Vmg4325-b10a Firmware, published February 4, 2025. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 14.4%, the 96th percentile. No source names a fixed version.