Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
ZyxelGs1900-48hpv2 Firmware*

8 matches found

CVE
CVE•added 2022/09/20 2:15 a.m.•56 views

CVE-2022-34746

An insufficient entropy vulnerability caused by the improper use of randomness sources with low entropy for RSA key pair generation was found in Zyxel GS1900 series firmware versions prior to V2.70. This vulnerability could allow an unauthenticated attacker to retrieve a private key by factoring th...

5.9CVSS5.7AI score0.00405EPSS
CVE
CVE•added 2023/11/07 5:15 a.m.•55 views

CVE-2023-35140

The improper privilege management vulnerability in the Zyxel GS1900-24EP switch firmware version V2.70(ABTO.5) could allow an authenticated local user with read-only access to modify system settings on a vulnerable device.

5.5CVSS5.3AI score0.00045EPSS
CVE
CVE•added 2024/11/12 2:15 a.m.•48 views

CVE-2024-8881

A post-authentication command injection vulnerability in the CGI program in the Zyxel GS1900-48 switch firmware version V2.80(AAHN.1)C0 and earlier could allow an authenticated, LAN-based attacker with administrator privileges to execute some operating system (OS) commands on an affected device by ...

6.8CVSS7.8AI score0.00502EPSS
CVE
CVE•added 2021/12/28 11:15 a.m.•46 views

CVE-2021-35031

A vulnerability in the TFTP client of Zyxel GS1900 series firmware, XGS1210 series firmware, and XGS1250 series firmware, which could allow an authenticated LAN user to execute arbitrary OS commands via the GUI of the vulnerable device.

8CVSS8AI score0.00085EPSS
CVE
CVE•added 2024/11/12 2:15 a.m.•44 views

CVE-2024-8882

A buffer overflow vulnerability in the CGI program in the Zyxel GS1900-48 switch firmware version V2.80(AAHN.1)C0 and earlier could allow an authenticated, LAN-based attacker with administrator privileges to cause denial of service (DoS) conditions via a crafted URL.

4.5CVSS7.3AI score0.00045EPSS
CVE
CVE•added 2021/07/26 12:15 p.m.•43 views

CVE-2021-35030

A vulnerability was found in the CGI program in Zyxel GS1900-8 firmware version V2.60, that did not properly sterilize packet contents and could allow an authenticated, local user to perform a cross-site scripting (XSS) attack via a crafted LLDP packet.

4.3CVSS4.4AI score0.00115EPSS
CVE
CVE•added 2021/12/28 11:15 a.m.•43 views

CVE-2021-35032

A vulnerability in the 'libsal.so' of the Zyxel GS1900 series firmware version 2.60 could allow an authenticated local user to execute arbitrary OS commands via a crafted function call.

7.8CVSS7.6AI score0.00036EPSS
CVE
CVE•added 2024/09/10 2:15 a.m.•43 views

CVE-2024-38270

An insufficient entropy vulnerability caused by the improper use of a randomness function with low entropy for web authentication tokens generation exists in the Zyxel GS1900-10HP firmware version V2.80(AAZI.0)C0. This vulnerability could allow a LAN-based attacker a slight chance to gain a valid s...

6.5CVSS7.5AI score0.00051EPSS