CVE-2021-35032

A vulnerability in the 'libsal.so' of the Zyxel GS1900 series firmware version 2.60 could allow an authenticated local user to execute arbitrary OS commands via a crafted function call...

CVE-2021-35031

The CVE-2021-35031 issue affects Zyxel GS1900 series firmware and XGS1210/XGS1250 series firmware, where the TFTP client component does not enforce privilege controls for functions that can run system commands. This enables an authenticated LAN user to execute arbitrary OS commands via the device...

Zyxel GS1900 操作系统命令注入漏洞

Zyxel ZyXEL GS1900 is a managed switch from Zyxel Taiwan, China. An operating system command injection vulnerability exists in the Zyxel GS1900, which can be exploited by an attacker to invoke a function to execute arbitrary system commands...

ZyXEL GS1900 操作系统命令注入漏洞

Zyxel ZyXEL GS1900 is a managed switch from Zyxel Taiwan, China. An Access Control Error vulnerability exists in multiple Zyxel products, which stems from the product's TFTP client not adding privilege controls to the functions that can execute system commands. The vulnerability can be exploited ...

CVE-2021-35030

A vulnerability was found in the CGI program in Zyxel GS1900-8 firmware version V2.60, that did not properly sterilize packet contents and could allow an authenticated, local user to perform a cross-site scripting XSS attack via a crafted LLDP packet...

CVE-2021-35030

A vulnerability was found in the CGI program in Zyxel GS1900-8 firmware version V2.60, that did not properly sterilize packet contents and could allow an authenticated, local user to perform a cross-site scripting XSS attack via a crafted LLDP packet...

Cross site scripting

A vulnerability was found in the CGI program in Zyxel GS1900-8 firmware version V2.60, that did not properly sterilize packet contents and could allow an authenticated, local user to perform a cross-site scripting XSS attack via a crafted LLDP packet...

CVE-2021-35030

A vulnerability was found in the CGI program in Zyxel GS1900-8 firmware version V2.60, that did not properly sterilize packet contents and could allow an authenticated, local user to perform a cross-site scripting XSS attack via a crafted LLDP packet...

Zyxel GS1900-8 跨站脚本漏洞

The Zyxel GS1900-8 is an intelligent managed switch with gigabit speeds and basic management features from Taiwan, China-based Hopkins Zyxel that brings greater flexibility and connectivity to users' business networks. A cross-site scripting vulnerability exists in the Zyxel GS1900-8 firmware,...

The vulnerability of the fds_sys_passDebugPasswd_ret() function in the libfds.so library of the Zyxel GS1900 series router microprogramming software allows a attacker to escalate their privileges.

The vulnerability of the fdssyspassDebugPasswdret function in the libfds.so library of the Zyxel GS1900 series router microprogramming software exists due to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to gain increased privileges...

The vulnerabilities of the functions fds_sys_passDebugPasswd_ret() and fds_sys_passRecoveryPasswd_ret() (libfds.so.0.0) in the Zyxel GS1900 series router software allow a attacker to increase their privileges.

The vulnerabilities of the functions fdssyspassDebugPasswdret and fdssyspassRecoveryPasswdret libfds.so.0.0 of the Zyxel GS1900 series routers’ microprogramming system are related to insufficient protection of registration data. Exploiting these vulnerabilities can allow a malicious actor to gain...

The vulnerability of Zyxel GS1900 series router microprogramming software lies in the fact that both users and administrators have identical access privileges when connecting via SSH. This allows a hacker to exploit this privilege to gain increased access.

The vulnerability of Zyxel GS1900 series router microprogramming software is related to the presence of identical access privileges when connecting via SSH for both users and administrators. Exploiting this vulnerability allows a malicious actor to enhance their privileged status remotely...

The vulnerability of the Password Recovery component in Zyxel router microprogramming software of the GS1900 series allows a intruder to influence the integrity of the protected information.

The vulnerability of the Password Recovery component in Zyxel router microprogramming systems of the GS1900 series exists due to insufficient validation of input data. Exploiting this vulnerability could allow an attacker, operating remotely, to compromise the integrity of the protected informati...

The vulnerabilities of the functions cmd_sys_traceroute_exec(), cmd_sys_arp_clear(), and cmd_sys_ping_exec() in the libclicmd.so library of the Zyxel GS1900 router microsystem software allow a attacker to execute arbitrary commands.

The vulnerabilities of the functions cmdsystracerouteexec, cmdsysarpclear, and cmdsyspingexec in the libclicmd.so library of the Zyxel GS1900 router microsystem software exist due to insufficient checking of input data. Exploiting these vulnerabilities can allow an attacker to execute arbitrary...

Unspecified Vulnerability in ZyXEL GS1900 (CNVD-2019-41672)

ZyXEL GS1900 is a managed switch from ZyXEL Taiwan, China. A security vulnerability exists in the Zyxel GS1900 using firmware prior to version 2.50AAHH.0C0, which originates from the libclicmd.so library in 'cmdsystracerouteexec', 'cmd sysarpclear' and 'cmdsyspingexec' functions in the...

ZyXEL GS1900 Use of Hardcoded Passwords Vulnerability

ZyXEL GS1900 is a managed switch from ZyXEL Taiwan, China. A security vulnerability exists in the Zyxel GS1900 using firmware prior to version 2.50AAHH.0C0. The vulnerability can be exploited by an attacker to decrypt passwords with the help of hard-coded encryption keys...

Unspecified Vulnerability in ZyXEL GS1900 (CNVD-2019-41669)

ZyXEL GS1900 is a managed switch from ZyXEL Taiwan, China. A security vulnerability exists in the Zyxel GS1900 using firmware prior to version 2.50AAHH.0C0. An attacker could exploit the vulnerability to access restricted features...

Unspecified Vulnerability in ZyXEL GS1900 (CNVD-2019-41670)

ZyXEL GS1900 is a managed switch from ZyXEL Taiwan, China. A security vulnerability exists in the Zyxel GS1900 using firmware prior to this version 2.50AAHH.0C0. An attacker could exploit the vulnerability to decrypt a previously encrypted password...

Unspecified Vulnerability in ZyXEL GS1900

ZyXEL GS1900 is a managed switch from ZyXEL Taiwan, China. A security vulnerability exists in the Zyxel GS1900 using firmware prior to version 2.50AAHH.0C0. The vulnerability can be exploited by an attacker to obtain the management password...

ZyXEL GS1900 Input Validation Error Vulnerability

ZyXEL GS1900 is a managed switch from ZyXEL Taiwan, China. A security vulnerability exists in the Zyxel GS1900 using firmware prior to version 2.50AAHH.0C0. The vulnerability can be exploited by an attacker to access the password recovery menu via the serial console...