GF
Product
GS1900-24E firmware
On CISA KEVExploited in the wild
16
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 6Medium 8Low 0
Watch
Add GS1900-24E firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-8881 | 6.8 | Nov 12 | A post-authentication command injection vulnerability in the CGI program in the Zyxel GS1900-48 switch firmware version V2.80(AAHN.1)C0 and earlier could allow an authenticated,… Affected: before 2.90\(aahk.0\)c0 |
| CVE-2022-45853 | 6.7 | May 30 | The privilege escalation vulnerability in the Zyxel GS1900-8 firmware version V2.70(AAHH.3) and the GS1900-8HP firmware version V2.70(AAHI.3) could allow an authenticated, local… Affected: 2.70(aahk.3) |
| CVE-2024-38270 | 6.5 | Sep 10 | An insufficient entropy vulnerability caused by the improper use of a randomness function with low entropy for web authentication tokens generation exists in the Zyxel GS1900-10HP… Affected: through 2.80\(aahk.1\)c0 |
| CVE-2022-34746 | 5.9 | Sep 20 | An insufficient entropy vulnerability caused by the improper use of randomness sources with low entropy for RSA key pair generation was found in Zyxel GS1900 series firmware… Affected: before 2.70\(aahk.3\)c0 |
| CVE-2019-15802 | 5.9 | Nov 14 | An issue was discovered on Zyxel GS1900 devices with firmware before 2.50(AAHH.0)C0 Affected: before 2.50\(aahk.0\)c0 |
| CVE-2023-35140 | 5.5 | Nov 7 | The improper privilege management vulnerability in the Zyxel GS1900-24EP switch firmware version V2.70(ABTO.5) could allow an authenticated local user with read-only access to… Affected: through 2.70\(aahk.5\) |
| CVE-2024-8882 | 4.5 | Nov 12 | A buffer overflow vulnerability in the CGI program in the Zyxel GS1900-48 switch firmware version V2.80(AAHN.1)C0 and earlier could allow an authenticated, LAN-based attacker with… Affected: before 2.90\(aahk.0\)c0 |
| CVE-2021-35030 | 4.3 | Jul 26 | A vulnerability was found in the CGI program in Zyxel GS1900-8 firmware version V2.60, that did not properly sterilize packet contents and could allow an authenticated, local user… Affected: before 2.70 |
Showing 8