CVE-2023-35140

🗓️ 07 Nov 2023 05:15:12Reported by [email protected]Type

Improper privilege management in Zyxel GS1900-24EP switch firmwar

Reporter	Title	Published	Views	Family All 9
BDU FSTEC	The vulnerability of the microprogrammed software of Zyxel GS1900-24EP switches, related to insecure privilege management, allows a intruder to alter system settings on the vulnerable device.	24 Nov 202300:00	–	bdu_fstec
CNNVD	Zyxel GS1900 Security Vulnerability	7 Nov 202300:00	–	cnnvd
CVE	CVE-2023-35140	7 Nov 202301:44	–	cve
Cvelist	CVE-2023-35140	7 Nov 202301:44	–	cvelist
EUVD	EUVD-2023-39170	3 Oct 202520:07	–	euvd
OSV	CVE-2023-35140	7 Nov 202305:15	–	osv
Prion	Privilege escalation	7 Nov 202305:15	–	prion
RedhatCVE	CVE-2023-35140	23 May 202504:36	–	redhatcve
Vulnrichment	CVE-2023-35140	7 Nov 202301:44	–	vulnrichment

NVD

Node

AND

zyxel gs1900-48hpv2_firmwareRange≤2.70(abtq.5)

zyxel gs1900-48hpv2Match-

Node

AND

zyxel gs1900-48_firmwareRange≤2.70(aahn.5)

zyxel gs1900-48Match-

Node

AND

zyxel gs1900-24hpv2_firmwareRange≤2.70(abtp.5)

zyxel gs1900-24hpv2Match-

Node

AND

zyxel gs1900-24ep_firmwareRange≤2.70(abto.5)

zyxel gs1900-24epMatch-

Node

AND

zyxel gs1900-24e_firmwareRange≤2.70(aahk.5)

zyxel gs1900-24eMatch-

Node

AND

zyxel gs1900-24_firmwareRange≤2.70(aahl.5)

zyxel gs1900-24Match-

Node

AND

zyxel gs1900-16_firmwareRange≤2.70(aahj.5)

zyxel gs1900-16Match-

Node

AND

zyxel gs1900-10hp_firmwareRange≤2.70(aazi.5)

zyxel gs1900-10hpMatch-

Node

AND

zyxel gs1900-8hp_firmwareRange≤2.70(aahi.5)

zyxel gs1900-8hpMatch-

Node

AND

zyxel gs1900-8_firmwareRange≤2.70(aahh.5)

zyxel gs1900-8Match-

Source	Link
zyxel	www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-improper-privilege-management-vulnerability-in-gs1900-series-switches

17 Jun 2026 06:04Current

5.3Medium risk

Vulners AI Score5.3

CVSS 3.15.5

EPSS0.00173

CWE-269