GF
Product
GS1900-48HPv2 firmware
On CISA KEVExploited in the wild
10
CVEs
1
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 3Medium 7Low 0
Watch
Add GS1900-48HPv2 firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-7273 In wildKEV | 8.8 | Jun 16 | Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability Affected: <= 2.90(ABTQ.1)C0 |
| CVE-2021-35031 | 8.0 | Dec 28 | A vulnerability in the TFTP client of Zyxel GS1900 series firmware, XGS1210 series firmware, and XGS1250 series firmware, which could allow an authenticated LAN user to execute… Affected: before 2.70\(abtq.0\)-20211208 |
| CVE-2021-35032 | 7.8 | Dec 28 | A vulnerability in the 'libsal.so' of the Zyxel GS1900 series firmware version 2.60 could allow an authenticated local user to execute arbitrary OS commands via a crafted function… Affected: before 2.70\(abtq.0\)-20211208 |
| CVE-2024-8881 | 6.8 | Nov 12 | A post-authentication command injection vulnerability in the CGI program in the Zyxel GS1900-48 switch firmware version V2.80(AAHN.1)C0 and earlier could allow an authenticated,… Affected: before 2.90\(abtq.0\)c0 |
| CVE-2022-45853 | 6.7 | May 30 | The privilege escalation vulnerability in the Zyxel GS1900-8 firmware version V2.70(AAHH.3) and the GS1900-8HP firmware version V2.70(AAHI.3) could allow an authenticated, local… Affected: 2.70(abtq.3) |
| CVE-2024-38270 | 6.5 | Sep 10 | An insufficient entropy vulnerability caused by the improper use of a randomness function with low entropy for web authentication tokens generation exists in the Zyxel GS1900-10HP… Affected: before 2.80\(abtq.1\)c0 |
| CVE-2022-34746 | 5.9 | Sep 20 | An insufficient entropy vulnerability caused by the improper use of randomness sources with low entropy for RSA key pair generation was found in Zyxel GS1900 series firmware… Affected: before 2.70\(abtq.3\)c0 |
| CVE-2023-35140 | 5.5 | Nov 7 | The improper privilege management vulnerability in the Zyxel GS1900-24EP switch firmware version V2.70(ABTO.5) could allow an authenticated local user with read-only access to… Affected: through 2.70\(abtq.5\) |
| CVE-2024-8882 | 4.5 | Nov 12 | A buffer overflow vulnerability in the CGI program in the Zyxel GS1900-48 switch firmware version V2.80(AAHN.1)C0 and earlier could allow an authenticated, LAN-based attacker with… Affected: before 2.90\(abtq.0\)c0 |
| CVE-2021-35030 | 4.3 | Jul 26 | A vulnerability was found in the CGI program in Zyxel GS1900-8 firmware version V2.60, that did not properly sterilize packet contents and could allow an authenticated, local user… Affected: before 2.70 |
Showing 10