CVE-2021-35032

🗓️ 28 Dec 2021 10:42:07Reported by ZyxelType

Zyxel GS1900 series firmware version 2.60 'libsal.so' local OS command executio

Reporter	Title	Published	Views	Family All 9
BDU FSTEC	The vulnerability of the libsal.so file in Zyxel GS1900 series switch software allows a hacker to execute arbitrary commands.	17 Feb 202200:00	–	bdu_fstec
CNNVD	Zyxel GS1900 操作系统命令注入漏洞	28 Dec 202100:00	–	cnnvd
CNVD	Zyxel GS1900 Operating System Command Injection Vulnerability	29 Dec 202100:00	–	cnvd
Cvelist	CVE-2021-35032	28 Dec 202110:42	–	cvelist
EUVD	EUVD-2021-21679	7 Oct 202500:30	–	euvd
NVD	CVE-2021-35032	28 Dec 202111:15	–	nvd
OSV	CVE-2021-35032	28 Dec 202111:15	–	osv
Prion	Design/Logic Flaw	28 Dec 202111:15	–	prion
RedhatCVE	CVE-2021-35032	22 May 202519:53	–	redhatcve

NVD

Node

zyxel gs1900-8_firmwareRange<2.70(aahh.0)-20211208

AND

zyxel gs1900-8Match-

Node

zyxel gs1900-8hp_firmwareRange<2.70(aahi.0)-20211208

AND

zyxel gs1900-8hpMatch-

Node

zyxel gs1900-10hp_firmwareRange<2.70(aazi.0)-20211208

AND

zyxel gs1900-10hpMatch-

Node

zyxel gs1900-16_firmwareRange<2.70(aahj.0)-20211208

AND

zyxel gs1900-16Match-

Node

zyxel gs1900-24e_firmwareRange<2.70(aahk.0)-20211208

AND

zyxel gs1900-24eMatch-

Node

zyxel gs1900-24ep_firmwareRange<2.70(abto.0)-20211208

AND

zyxel gs1900-24epMatch-

Node

zyxel gs1900-24_firmwareRange<2.70(aahl.0)-20211208

AND

zyxel gs1900-24Match-

Node

zyxel gs1900-24hp_firmwareRange<2.70(aahm.0)-20211208

AND

zyxel gs1900-24hpMatch-

Node

zyxel gs1900-24hpv2_firmwareRange<2.70(aatp.0)-20211208

AND

zyxel gs1900-24hpv2Match-

Node

zyxel gs1900-48_firmwareRange<2.70(aahn.0)-20211208

AND

zyxel gs1900-48Match-

Node

zyxel gs1900-48hp_firmwareRange<2.70(aaho.0)-20211208

AND

zyxel gs1900-48hpMatch-

Node

zyxel gs1900-48hpv2_firmwareRange<2.70(abtq.0)-20211208

AND

zyxel gs1900-48hpv2Match-

[
  {
    "product": "GS1900 series firmware",
    "vendor": "Zyxel",
    "versions": [
      {
        "status": "affected",
        "version": "2.60"
      }
    ]
  }
]

Source	Link
zyxel	www.zyxel.com/support/Zyxel_security_advisory_for_OS_command_injection_vulnerabilities_of_switches.shtml

21 Nov 2024 06:11Current

7.6High risk

Vulners AI Score7.6

CVSS 27.2

CVSS 3.16.4 - 7.8

EPSS0.00036

CWE-78