Home/Product/zyxel gs1900 24ep firmware
Product

zyxel gs1900 24ep firmware

9 known vulnerabilities across versions
Vulnerabilities are listed by affected version. Select any CVE for the full briefing and its intelligence graph.
CVE-2024-8882
< 2.90\(abto.0\)c0
A buffer overflow vulnerability in the CGI program in the Zyxel GS1900-48 switch firmware version V2.80(AAHN.1)C0 and earlier cou
4.5MEDIUM
 CVE-2024-8881
< 2.90\(abto.0\)c0
A post-authentication command injection vulnerability in the CGI program in the Zyxel GS1900-48 switch firmware version V2.80(AAHN
6.8MEDIUM
 CVE-2024-38270
< 2.80\(abto.1\)c0
An insufficient entropy vulnerability caused by the improper use of a randomness function with low entropy for web authentication
5.3MEDIUM
 CVE-2023-35140
<= 2.70\(abto.5\)
The improper privilege management vulnerability in the Zyxel GS1900-24EP switch firmware version V2.70(ABTO.5) could allow an aut
5.5MEDIUM
 CVE-2022-45853
all versions
The privilege escalation vulnerability in the Zyxel GS1900-8 firmware version V2.70(AAHH.3) and the GS1900-8HP firmware version
6.7MEDIUM
 CVE-2022-34746
< 2.70\(abto.3\)c0
An insufficient entropy vulnerability caused by the improper use of randomness sources with low entropy for RSA key pair generatio
5.9MEDIUM
 CVE-2021-35032
< 2.70\(abto.0\)-20211208
A vulnerability in the 'libsal.so' of the Zyxel GS1900 series firmware version 2.60 could allow an authenticated local user to exe
6.4MEDIUM
 CVE-2021-35031
< 2.70\(abto.0\)-20211208
A vulnerability in the TFTP client of Zyxel GS1900 series firmware, XGS1210 series firmware, and XGS1250 series firmware, which co
6.8MEDIUM
 CVE-2021-35030
< 2.70
A vulnerability was found in the CGI program in Zyxel GS1900-8 firmware version V2.60, that did not properly sterilize packet cont
3.5LOW
Vulnerabilities
CISA KEV catalog
CWE weaknesses
CAPEC attack patterns
Package vulnerabilities
Threat intelligence
Threat actors
Tools & malware
ATT&CK techniques
IOCs
Detection & defense
Sigma rules
YARA rules
Atomic Red Team tests
D3FEND countermeasures
Compliance
NIST 800-53
ISO 27001:2022
SOC 2 TSC
PCI-DSS v4.0
CIS Controls v8.1
About
All capabilities
Live statistics
Data sources
Privacy policy
Terms of service
threatengine.sh  ·  Open-source threat intelligence platform  ·  100+ authoritative sources  ·  Every fact traces to its origin