Input validation

2023-01-1102:15:00

PRIOn knowledge base

www.prio-n.com

improper validation

zyxel gs1920-24v2

memory corruption

denial-of-service

http request

8.1 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

40.4%

JSON

An improper check for unusual or exceptional conditions in the HTTP request processing function of Zyxel GS1920-24v2 firmware prior to V4.70(ABMH.8)C0, which could allow an unauthenticated attacker to corrupt the contents of the memory and result in a denial-of-service (DoS) condition on a vulnerable device.

CPENameOperatorVersion
gs1350-12hp_firmwareeq< 4.70abpj.5c0
gs1350-18hp_firmwareeq< 4.70abpk.5c0
gs1350-26hp_firmwareeq< 4.70abpl.5c0
gs1350-6hp_firmwareeq< 4.70abpi.5c0
gs1915-24e_firmwareeq< 4.70acdr.3c0
gs1915-24ep_firmwareeq< 4.70acds.3c0
gs1915-8_firmwareeq< 4.70acap.3c0
gs1915-8ep_firmwareeq< 4.70acaq.3c0
gs1920-24hpv2_firmwareeq< 4.70abmi.8c0
gs1920-24v2_firmwareeq< 4.70abmh.8c0

Name	Operator	Version
gs1350-12hp_firmware	eq	< 4.70abpj.5c0
gs1350-18hp_firmware	eq	< 4.70abpk.5c0
gs1350-26hp_firmware	eq	< 4.70abpl.5c0
gs1350-6hp_firmware	eq	< 4.70abpi.5c0
gs1915-24e_firmware	eq	< 4.70acdr.3c0
gs1915-24ep_firmware	eq	< 4.70acds.3c0
gs1915-8_firmware	eq	< 4.70acap.3c0
gs1915-8ep_firmware	eq	< 4.70acaq.3c0
gs1920-24hpv2_firmware	eq	< 4.70abmi.8c0
gs1920-24v2_firmware	eq	< 4.70abmh.8c0