GS1900-24 firmware vulnerabilities | LiveThreat CVE Feed

Product

GS1900-24 firmware

by Zyxel · last CVE Jun 16, 2026

On CISA KEVExploited in the wild

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities17 In the news2 Timeline

Severity mix

Critical 2High 6Medium 9Low 0

Severity

All severities17 Critical2 High6 Medium9 Low0

Exploitation

On CISA KEV1 Exploited in the wild1

Watch

Add GS1900-24 firmware to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2024-8881	6.8	1%	Nov 12	A post-authentication command injection vulnerability in the CGI program in the Zyxel GS1900-48 switch firmware version V2.80(AAHN.1)C0 and earlier could allow an authenticated,… Affected: before 2.90\(aahl.0\)c0
CVE-2022-45853	6.7	0%	May 30	The privilege escalation vulnerability in the Zyxel GS1900-8 firmware version V2.70(AAHH.3) and the GS1900-8HP firmware version V2.70(AAHI.3) could allow an authenticated, local… Affected: 2.70(aahl.3)
CVE-2024-38270	6.5	0%	Sep 10	An insufficient entropy vulnerability caused by the improper use of a randomness function with low entropy for web authentication tokens generation exists in the Zyxel GS1900-10HP… Affected: through 2.80\(aahl.1\)c0
CVE-2022-34746	5.9	0%	Sep 20	An insufficient entropy vulnerability caused by the improper use of randomness sources with low entropy for RSA key pair generation was found in Zyxel GS1900 series firmware… Affected: before 2.70\(aahl.3\)c0
CVE-2019-15802	5.9	2%	Nov 14	An issue was discovered on Zyxel GS1900 devices with firmware before 2.50(AAHH.0)C0 Affected: before 2.50\(aahl.0\)c0
CVE-2015-7256	5.9	1%	Sep 28	ZyXEL NWA1100-N, NWA1100-NH, NWA1121-NI, NWA1123-AC, and NWA1123-NI access points; P-660HN-51, P-663HN-51, VMG1312-B10A, VMG1312-B30A, VMG1312-B30B, VMG4380-B10A, VMG8324-B10A,… Affected: All versions, or not specified
CVE-2023-35140	5.5	0%	Nov 7	The improper privilege management vulnerability in the Zyxel GS1900-24EP switch firmware version V2.70(ABTO.5) could allow an authenticated local user with read-only access to… Affected: through 2.70\(aahl.5\)
CVE-2024-8882	4.5	0%	Nov 12	A buffer overflow vulnerability in the CGI program in the Zyxel GS1900-48 switch firmware version V2.80(AAHN.1)C0 and earlier could allow an authenticated, LAN-based attacker with… Affected: before 2.90\(aahl.0\)c0
CVE-2021-35030	4.3	0%	Jul 26	A vulnerability was found in the CGI program in Zyxel GS1900-8 firmware version V2.60, that did not properly sterilize packet contents and could allow an authenticated, local user… Affected: before 2.70