Danyw24/zyxel-p870hn-hardware-hacking

PoC

From a bare PCB to root: hardware-hacking a ZyXEL P-870HN (BCM6368) over UART — CVE-2025-0890 + CVE-2024-40891, on my own hardware.

view exploit source poc_in_githubauthor Danyw24published 2026-08-13catalog poc_in_github

exploited CVEs (2)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2025-0890US	—OT elevated	14.4% (97th)	Exploit	2025-02-04
UNSUPPORTED WHEN ASSIGNED Insecure default credentials for the Telnet function in the legacy DSL CPE Zyxel VMG4325-B10A firmware version 1.00(AAFR.4)C0_20170615 could allow an…
CVE-2024-40891US	—OT critical	22.9% (98th)	KEV	2025-02-04
UNSUPPORTED WHEN ASSIGNED A post-authentication command injection vulnerability in the management commands of the legacy DSL CPE Zyxel VMG4325-B10A firmware version 1.00(AAFR.4…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.