CVE-2024-8881

🗓️ 12 Nov 2024 01:17:36Reported by ZyxelType

A post-authentication command injection vulnerability in Zyxel GS1900-48 switch firmwar

Reporter	Title	Published	Views	Family All 7
Circl	CVE-2024-8881	12 Nov 202401:32	–	circl
CNNVD	Zyxel GS1900 安全漏洞	12 Nov 202400:00	–	cnnvd
Cvelist	CVE-2024-8881	12 Nov 202401:17	–	cvelist
EUVD	EUVD-2024-49453	3 Oct 202520:07	–	euvd
NVD	CVE-2024-8881	12 Nov 202402:15	–	nvd
RedhatCVE	CVE-2024-8881	23 May 202507:18	–	redhatcve
Vulnrichment	CVE-2024-8881	12 Nov 202401:17	–	vulnrichment

NVD

Node

zyxel gs1900-8_firmwareRange<2.90(aahh.0)c0

AND

zyxel gs1900-8Match-

Node

zyxel gs1900-8hp_firmwareRange<2.90(aahi.0)c0

AND

zyxel gs1900-8hpMatch-

Node

zyxel gs1900-10hp_firmwareRange<2.90(aazi.0)c0

AND

zyxel gs1900-10hpMatch-

Node

zyxel gs1900-16_firmwareRange<2.90(aahj.0)c0

AND

zyxel gs1900-16Match-

Node

zyxel gs1900-24_firmwareRange<2.90(aahl.0)c0

AND

zyxel gs1900-24Match-

Node

zyxel gs1900-24e_firmwareRange<2.90(aahk.0)c0

AND

zyxel gs1900-24eMatch-

Node

zyxel gs1900-24ep_firmwareRange<2.90(abto.0)c0

AND

zyxel gs1900-24epMatch-

Node

zyxel gs1900-24hpv2_firmwareRange<2.90(abtp.0)c0

AND

zyxel gs1900-24hpv2Match-

Node

zyxel gs1900-48_firmwareRange<2.90(aahn.0)c0

AND

zyxel gs1900-48Match-

Node

zyxel gs1900-48hpv2_firmwareRange<2.90(abtq.0)c0

AND

zyxel gs1900-48hpv2Match-

[
  {
    "defaultStatus": "unaffected",
    "product": "GS1900-48 firmware",
    "vendor": "Zyxel",
    "versions": [
      {
        "status": "affected",
        "version": "<= V2.80(AAHN.1)C0"
      }
    ]
  }
]

Source	Link
zyxel	www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-post-authentication-command-injection-and-buffer-overflow-vulnerabilities-in-gs1900-series-switches-11-12-2024

14 Nov 2024 13:51Current

7.8High risk

Vulners AI Score7.8

CVSS 3.16.8

EPSS0.00168

SSVC

CWE-78