Lucene search

[email protected]CVE-2021-35031

HistoryDec 28, 2021 - 11:15 a.m.

CVE-2021-35031

2021-12-2811:15:07

CWE-78

[email protected]

web.nvd.nist.gov

vulnerability

tftp client

zyxel

gs1900

xgs1210

xgs1250

firmware

os commands

authenticated user

lan

gui

nvd

cve-2021-35031

7.7 High

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:A/AC:L/Au:S/C:C/I:C/A:C

8 High

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

8 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

13.2%

JSON

A vulnerability in the TFTP client of Zyxel GS1900 series firmware, XGS1210 series firmware, and XGS1250 series firmware, which could allow an authenticated LAN user to execute arbitrary OS commands via the GUI of the vulnerable device.

Affected configurations

NVD

Node

zyxelgs1900-8_firmwareRange<2.70\(aahh.0\)-20211208

AND

zyxelgs1900-8Match-

Node

zyxelgs1900-8hp_firmwareRange<2.70\(aahi.0\)-20211208

AND

zyxelgs1900-8hpMatch-

Node

zyxelgs1900-10hp_firmwareRange<2.70\(aazi.0\)-20211208

AND

zyxelgs1900-10hpMatch-

Node

zyxelgs1900-16_firmwareRange<2.70\(aahj.0\)-20211208

AND

zyxelgs1900-16Match-

Node

zyxelgs1900-24e_firmwareRange<2.70\(aahk.0\)-20211208

AND

zyxelgs1900-24eMatch-

Node

zyxelgs1900-24ep_firmwareRange<2.70\(abto.0\)-20211208

AND

zyxelgs1900-24epMatch-

Node

zyxelgs1900-24_firmwareRange<2.70\(aahl.0\)-20211208

AND

zyxelgs1900-24Match-

Node

zyxelgs1900-24hp_firmwareRange<2.70\(aahm.0\)-20211208

AND

zyxelgs1900-24hpMatch-

Node

zyxelgs1900-24hpv2_firmwareRange<2.70\(aatp.0\)-20211208

AND

zyxelgs1900-24hpv2Match-

Node

zyxelgs1900-48_firmwareRange<2.70\(aahn.0\)-20211208

AND

zyxelgs1900-48Match-

Node

zyxelgs1900-48hp_firmwareRange<2.70\(aaho.0\)-20211208

AND

zyxelgs1900-48hpMatch-

Node

zyxelgs1900-48hpv2_firmwareRange<2.70\(abtq.0\)-20211208

AND

zyxelgs1900-48hpv2Match-

Node

zyxelxgs1210-12_firmwareRange<1.00\(abty.5\)c0

AND

zyxelxgs1210-12Match-

Node

zyxelxgs1250-12_firmwareRange<1.00\(abwe.1\)c0

AND

zyxelxgs1250-12Match-

CPENameOperatorVersion
zyxel:gs1900-8_firmwarezyxel gs1900-8 firmwarelt2.70\(aahh.0\)-20211208

CPE	Name	Operator	Version
zyxel:gs1900-8_firmware	zyxel gs1900-8 firmware	lt	2.70\(aahh.0\)-20211208

CNA Affected

[
  {
    "product": "GS1900 series firmware",
    "vendor": "Zyxel",
    "versions": [
      {
        "status": "affected",
        "version": "2.60"
      }
    ]
  },
  {
    "product": "XGS1210 series firmware",
    "vendor": "Zyxel",
    "versions": [
      {
        "status": "affected",
        "version": "1.00(ABTY.4)C0"
      }
    ]
  },
  {
    "product": "XGS1250 series firmware",
    "vendor": "Zyxel",
    "versions": [
      {
        "status": "affected",
        "version": "1.00(ABWE.0)C0"
      }
    ]
  }
]

References

www.zyxel.com/support/Zyxel_security_advisory_for_OS_command_injection_vulnerabilities_of_switches.shtml

7.7 High

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:A/AC:L/Au:S/C:C/I:C/A:C

8 High

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

8 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

13.2%

JSON

Related for CVE-2021-35031

cnvd1 cvelist1 nvd1 prion1