CVE-2023-35140

🗓️ 07 Nov 2023 01:44:18Reported by ZyxelType

The improper privilege management vulnerability in Zyxel GS1900-24EP switch firmware V2.70(ABTO.5) allows authenticated local user to modify system settings

Reporter	Title	Published	Views	Family All 7
CNNVD	Zyxel GS1900 Security Vulnerability	7 Nov 202300:00	–	cnnvd
Cvelist	CVE-2023-35140	7 Nov 202301:44	–	cvelist
EUVD	EUVD-2023-39170	3 Oct 202520:07	–	euvd
NVD	CVE-2023-35140	7 Nov 202305:15	–	nvd
Prion	Privilege escalation	7 Nov 202305:15	–	prion
RedhatCVE	CVE-2023-35140	23 May 202504:36	–	redhatcve
Vulnrichment	CVE-2023-35140	7 Nov 202301:44	–	vulnrichment

NVD

Node

zyxel gs1900-48hpv2_firmwareRange≤2.70(abtq.5)

AND

zyxel gs1900-48hpv2Match-

Node

zyxel gs1900-48_firmwareRange≤2.70(aahn.5)

AND

zyxel gs1900-48Match-

Node

zyxel gs1900-24hpv2_firmwareRange≤2.70(abtp.5)

AND

zyxel gs1900-24hpv2Match-

Node

zyxel gs1900-24ep_firmwareRange≤2.70(abto.5)

AND

zyxel gs1900-24epMatch-

Node

zyxel gs1900-24e_firmwareRange≤2.70(aahk.5)

AND

zyxel gs1900-24eMatch-

Node

zyxel gs1900-24_firmwareRange≤2.70(aahl.5)

AND

zyxel gs1900-24Match-

Node

zyxel gs1900-16_firmwareRange≤2.70(aahj.5)

AND

zyxel gs1900-16Match-

Node

zyxel gs1900-10hp_firmwareRange≤2.70(aazi.5)

AND

zyxel gs1900-10hpMatch-

Node

zyxel gs1900-8hp_firmwareRange≤2.70(aahi.5)

AND

zyxel gs1900-8hpMatch-

Node

zyxel gs1900-8_firmwareRange≤2.70(aahh.5)

AND

zyxel gs1900-8Match-

[
  {
    "defaultStatus": "unaffected",
    "product": "GS1900-24EP firmware",
    "vendor": "Zyxel",
    "versions": [
      {
        "status": "affected",
        "version": "V2.70(ABTO.5)"
      }
    ]
  }
]

Source	Link
zyxel	www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-improper-privilege-management-vulnerability-in-gs1900-series-switches

21 Nov 2024 08:08Current

5.3Medium risk

Vulners AI Score5.3

CVSS 3.15.5

EPSS0.00059

SSVC

CWE-269