GF
Product
GS1900-10HP firmware
On CISA KEVExploited in the wild
35
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 17Medium 13Low 0
Watch
Add GS1900-10HP firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-7273 In wildKEV | 8.8 | Jun 16 | Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability Affected: <= 2.90(AAZI.1)C0 |
| CVE-2019-15800 | 9.8 | Nov 14 | An issue was discovered on Zyxel GS1900 devices with firmware before 2.50(AAHH.0)C0 Affected: before 2.50\(aazi.0\)c0 |
| CVE-2016-1329 | 9.8 | Mar 3 | Cisco NX-OS 6.0(2)U6(1) through 6.0(2)U6(5) on Nexus 3000 devices and 6.0(2)A6(1) through 6.0(2)A6(5) and 6.0(2)A7(1) on Nexus 3500 devices has hardcoded credentials, which allows… Affected: before 2.50\(aazi.0\)c0; before 2.50\(aazi.0\)c0 |
| CVE-2015-5989 | 9.8 | Dec 31 | Belkin F9K1102 2 devices with firmware 2.10.17 rely on client-side JavaScript code for authorization, which allows remote attackers to obtain administrative privileges via certain… Affected: before 2.50\(aazi.0\)c0 |
| CVE-2015-5988 | 9.8 | Dec 31 | The web management interface on Belkin F9K1102 2 devices with firmware 2.10.17 has a blank password, which allows remote attackers to obtain administrative privileges by… Affected: before 2.50\(aazi.0\)c0 |
| CVE-2019-15803 | 9.1 | Nov 14 | An issue was discovered on Zyxel GS1900 devices with firmware before 2.50(AAHH.0)C0 Affected: before 2.50\(aazi.0\)c0 |
| CVE-2019-15799 | 8.8 | Nov 14 | An issue was discovered on Zyxel GS1900 devices with firmware before 2.50(AAHH.0)C0 Affected: before 2.50\(aazi.0\)c0 |
| CVE-2016-1302 | 8.8 | Feb 7 | Cisco Application Policy Infrastructure Controller (APIC) devices with software before 1.0(3h) and 1.1 before 1.1(1j) and Nexus 9000 ACI Mode switches with software before… Affected: before 2.50\(aazi.0\)c0; before 2.50\(aazi.0\)c0 |
| CVE-2015-5990 | 8.8 | Dec 31 | Cross-site request forgery (CSRF) vulnerability on Belkin F9K1102 2 devices with firmware 2.10.17 allows remote attackers to hijack the authentication of arbitrary users Affected: before 2.50\(aazi.0\)c0 |
| CVE-2015-5987 | 8.6 | Dec 31 | Belkin F9K1102 2 devices with firmware 2.10.17 use an improper algorithm for selecting the ID value in the header of a DNS query, which makes it easier for remote attackers to… Affected: before 2.50\(aazi.0\)c0 |
| CVE-2021-35031 | 8.0 | Dec 28 | A vulnerability in the TFTP client of Zyxel GS1900 series firmware, XGS1210 series firmware, and XGS1250 series firmware, which could allow an authenticated LAN user to execute… Affected: before 2.70\(aazi.0\)-20211208 |
| CVE-2021-35032 | 7.8 | Dec 28 | A vulnerability in the 'libsal.so' of the Zyxel GS1900 series firmware version 2.60 could allow an authenticated local user to execute arbitrary OS commands via a crafted function… Affected: before 2.70\(aazi.0\)-20211208 |
| CVE-2019-15804 | 7.5 | Nov 14 | An issue was discovered on Zyxel GS1900 devices with firmware before 2.50(AAHH.0)C0 Affected: before 2.50\(aazi.0\)c0 |
| CVE-2019-15801 | 7.5 | Nov 14 | An issue was discovered on Zyxel GS1900 devices with firmware before 2.50(AAHH.0)C0 Affected: before 2.50\(aazi.0\)c0 |
| CVE-2015-6313 | 7.5 | Apr 6 | Cisco TelePresence Server 4.1(2.29) through 4.2(4.17) on 7010; Mobility Services Engine (MSE) 8710; Multiparty Media 310, 320, and 820; and Virtual Machine (VM) devices allows… Affected: before 2.50\(aazi.0\)c0 |
| CVE-2015-6312 | 7.5 | Apr 6 | Cisco TelePresence Server 3.1 on 7010, Mobility Services Engine (MSE) 8710, Multiparty Media 310 and 320, and Virtual Machine (VM) devices allows remote attackers to cause a… Affected: before 2.50\(aazi.0\)c0 |
| CVE-2016-1350 | 7.5 | Mar 26 | Cisco IOS 15.3 and 15.4, Cisco IOS XE 3.8 through 3.11, and Cisco Unified Communications Manager allow remote attackers to cause a denial of service (device reload) via malformed… Affected: before 2.50\(aazi.0\)c0 |
| CVE-2016-1349 | 7.5 | Mar 26 | The Smart Install client implementation in Cisco IOS 12.2, 15.0, and 15.2 and IOS XE 3.2 through 3.7 allows remote attackers to cause a denial of service (device reload) via… Affected: before 2.50\(aazi.0\)c0 |
| CVE-2016-1348 | 7.5 | Mar 26 | Cisco IOS 15.0 through 15.5 and IOS XE 3.3 through 3.16 allow remote attackers to cause a denial of service (device reload) via a crafted DHCPv6 Relay message, aka Bug ID… Affected: before 2.50\(aazi.0\)c0 |
| CVE-2015-6260 | 7.5 | Mar 3 | Cisco NX-OS 7.1(1)N1(1) on Nexus 5500, 5600, and 6000 devices does not properly validate PDUs in SNMP packets, which allows remote attackers to cause a denial of service (SNMP… Affected: before 2.50\(aazi.0\)c0 |
| CVE-2015-0718 | 7.5 | Mar 3 | Cisco NX-OS 4.0 through 6.1 on Nexus 1000V 3000, 4000, 5000, 6000, and 7000 devices and Unified Computing System (UCS) platforms allows remote attackers to cause a denial of… Affected: before 2.50\(aazi.0\)c0 |
| CVE-2015-6398 | 7.5 | Feb 7 | Cisco Nexus 9000 Application Centric Infrastructure (ACI) Mode switches with software before 11.0(1c) allow remote attackers to cause a denial of service (device reload) via an… Affected: before 2.50\(aazi.0\)c0 |
| CVE-2024-8881 | 6.8 | Nov 12 | A post-authentication command injection vulnerability in the CGI program in the Zyxel GS1900-48 switch firmware version V2.80(AAHN.1)C0 and earlier could allow an authenticated,… Affected: before 2.90\(aazi.0\)c0 |
| CVE-2022-45853 | 6.7 | May 30 | The privilege escalation vulnerability in the Zyxel GS1900-8 firmware version V2.70(AAHH.3) and the GS1900-8HP firmware version V2.70(AAHI.3) could allow an authenticated, local… Affected: 2.70(aazi.3) |
| CVE-2024-38270 | 6.5 | Sep 10 | An insufficient entropy vulnerability caused by the improper use of a randomness function with low entropy for web authentication tokens generation exists in the Zyxel GS1900-10HP… Affected: V2.80(AAZI.0)C0 |
| CVE-2022-34746 | 5.9 | Sep 20 | An insufficient entropy vulnerability caused by the improper use of randomness sources with low entropy for RSA key pair generation was found in Zyxel GS1900 series firmware… Affected: before 2.70\(aazi.3\)c0 |
| CVE-2019-15802 | 5.9 | Nov 14 | An issue was discovered on Zyxel GS1900 devices with firmware before 2.50(AAHH.0)C0 Affected: before 2.50\(aazi.0\)c0 |
| CVE-2016-1346 | 5.9 | Apr 6 | The kernel in Cisco TelePresence Server 3.0 through 4.2(4.18) on Mobility Services Engine (MSE) 8710 devices allows remote attackers to cause a denial of service (panic and… Affected: before 2.50\(aazi.0\)c0 |
| CVE-2016-1344 | 5.9 | Mar 26 | The IKEv2 implementation in Cisco IOS 15.0 through 15.6 and IOS XE 3.3 through 3.17 allows remote attackers to cause a denial of service (device reload) via fragmented packets,… Affected: before 2.50\(aazi.0\)c0 |
| CVE-2023-35140 | 5.5 | Nov 7 | The improper privilege management vulnerability in the Zyxel GS1900-24EP switch firmware version V2.70(ABTO.5) could allow an authenticated local user with read-only access to… Affected: through 2.70\(aazi.5\) |
| CVE-2016-1307 | 5.4 | Feb 7 | The Openfire server in Cisco Finesse Desktop 10.5(1) and 11.0(1) and Unified Contact Center Express 10.6(1) has a hardcoded account, which makes it easier for remote attackers to… Affected: before 2.50\(aazi.0\)c0; before 2.50\(aazi.0\)c0 |
| CVE-2016-1319 | 5.3 | Feb 9 | Cisco Unified Communications Manager (aka CallManager) 9.1(2.10000.28), 10.5(2.10000.5), 10.5(2.12901.1), and 11.0(1.10000.10); Unified Communications Manager IM & Presence… Affected: before 2.50\(aazi.0\)c0 |
| CVE-2024-8882 | 4.5 | Nov 12 | A buffer overflow vulnerability in the CGI program in the Zyxel GS1900-48 switch firmware version V2.80(AAHN.1)C0 and earlier could allow an authenticated, LAN-based attacker with… Affected: before 2.90\(aazi.0\)c0 |
| CVE-2021-35030 | 4.3 | Jul 26 | A vulnerability was found in the CGI program in Zyxel GS1900-8 firmware version V2.60, that did not properly sterilize packet contents and could allow an authenticated, local user… Affected: before 2.70 |
| CVE-2016-1317 | 4.3 | Feb 9 | Cisco Unified Communications Manager 11.5(0.98000.480) allows remote authenticated users to obtain sensitive database table-name and entity-name information via a direct request… Affected: before 2.50\(aazi.0\)c0 |
Showing 35