Design/Logic Flaw

2021-12-2811:15:00

PRIOn knowledge base

www.prio-n.com

8 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

13.3%

JSON

A vulnerability in the TFTP client of Zyxel GS1900 series firmware, XGS1210 series firmware, and XGS1250 series firmware, which could allow an authenticated LAN user to execute arbitrary OS commands via the GUI of the vulnerable device.

CPENameOperatorVersion
gs1900-10hp_firmwareeq< 2.70aazi.0-20211208
gs1900-16_firmwareeq< 2.70aahj.0-20211208
gs1900-24_firmwareeq< 2.70aahl.0-20211208
gs1900-24e_firmwareeq< 2.70aahk.0-20211208
gs1900-24ep_firmwareeq< 2.70abto.0-20211208
gs1900-24hp_firmwareeq< 2.70aahm.0-20211208
gs1900-24hpv2_firmwareeq< 2.70aatp.0-20211208
gs1900-48_firmwareeq< 2.70aahn.0-20211208
gs1900-48hp_firmwareeq< 2.70aaho.0-20211208
gs1900-48hpv2_firmwareeq< 2.70abtq.0-20211208

Name	Operator	Version
gs1900-10hp_firmware	eq	< 2.70aazi.0-20211208
gs1900-16_firmware	eq	< 2.70aahj.0-20211208
gs1900-24_firmware	eq	< 2.70aahl.0-20211208
gs1900-24e_firmware	eq	< 2.70aahk.0-20211208
gs1900-24ep_firmware	eq	< 2.70abto.0-20211208
gs1900-24hp_firmware	eq	< 2.70aahm.0-20211208
gs1900-24hpv2_firmware	eq	< 2.70aatp.0-20211208
gs1900-48_firmware	eq	< 2.70aahn.0-20211208
gs1900-48hp_firmware	eq	< 2.70aaho.0-20211208
gs1900-48hpv2_firmware	eq	< 2.70abtq.0-20211208