GS1900-10HP firmware vulnerabilities | LiveThreat CVE Feed

Product

GS1900-10HP firmware

by Zyxel · last CVE Jun 16, 2026

On CISA KEVExploited in the wild

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities35 In the news2 Timeline

Severity mix

Critical 5High 17Medium 13Low 0

Severity

All severities35 Critical5 High17 Medium13 Low0

Exploitation

On CISA KEV1 Exploited in the wild1

Watch

Add GS1900-10HP firmware to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2024-8881	6.8	1%	Nov 12	A post-authentication command injection vulnerability in the CGI program in the Zyxel GS1900-48 switch firmware version V2.80(AAHN.1)C0 and earlier could allow an authenticated,… Affected: before 2.90\(aazi.0\)c0
CVE-2022-45853	6.7	0%	May 30	The privilege escalation vulnerability in the Zyxel GS1900-8 firmware version V2.70(AAHH.3) and the GS1900-8HP firmware version V2.70(AAHI.3) could allow an authenticated, local… Affected: 2.70(aazi.3)
CVE-2024-38270	6.5	0%	Sep 10	An insufficient entropy vulnerability caused by the improper use of a randomness function with low entropy for web authentication tokens generation exists in the Zyxel GS1900-10HP… Affected: V2.80(AAZI.0)C0
CVE-2022-34746	5.9	0%	Sep 20	An insufficient entropy vulnerability caused by the improper use of randomness sources with low entropy for RSA key pair generation was found in Zyxel GS1900 series firmware… Affected: before 2.70\(aazi.3\)c0
CVE-2019-15802	5.9	2%	Nov 14	An issue was discovered on Zyxel GS1900 devices with firmware before 2.50(AAHH.0)C0 Affected: before 2.50\(aazi.0\)c0
CVE-2016-1346	5.9	2%	Apr 6	The kernel in Cisco TelePresence Server 3.0 through 4.2(4.18) on Mobility Services Engine (MSE) 8710 devices allows remote attackers to cause a denial of service (panic and… Affected: before 2.50\(aazi.0\)c0
CVE-2016-1344	5.9	3%	Mar 26	The IKEv2 implementation in Cisco IOS 15.0 through 15.6 and IOS XE 3.3 through 3.17 allows remote attackers to cause a denial of service (device reload) via fragmented packets,… Affected: before 2.50\(aazi.0\)c0
CVE-2023-35140	5.5	0%	Nov 7	The improper privilege management vulnerability in the Zyxel GS1900-24EP switch firmware version V2.70(ABTO.5) could allow an authenticated local user with read-only access to… Affected: through 2.70\(aazi.5\)
CVE-2016-1307	5.4	1%	Feb 7	The Openfire server in Cisco Finesse Desktop 10.5(1) and 11.0(1) and Unified Contact Center Express 10.6(1) has a hardcoded account, which makes it easier for remote attackers to… Affected: before 2.50\(aazi.0\)c0; before 2.50\(aazi.0\)c0
CVE-2016-1319	5.3	1%	Feb 9	Cisco Unified Communications Manager (aka CallManager) 9.1(2.10000.28), 10.5(2.10000.5), 10.5(2.12901.1), and 11.0(1.10000.10); Unified Communications Manager IM & Presence… Affected: before 2.50\(aazi.0\)c0
CVE-2024-8882	4.5	0%	Nov 12	A buffer overflow vulnerability in the CGI program in the Zyxel GS1900-48 switch firmware version V2.80(AAHN.1)C0 and earlier could allow an authenticated, LAN-based attacker with… Affected: before 2.90\(aazi.0\)c0
CVE-2021-35030	4.3	0%	Jul 26	A vulnerability was found in the CGI program in Zyxel GS1900-8 firmware version V2.60, that did not properly sterilize packet contents and could allow an authenticated, local user… Affected: before 2.70
CVE-2016-1317	4.3	1%	Feb 9	Cisco Unified Communications Manager 11.5(0.98000.480) allows remote authenticated users to obtain sensitive database table-name and entity-name information via a direct request… Affected: before 2.50\(aazi.0\)c0