GF
Product
GS1900-8HP firmware
On CISA KEVExploited in the wild
16
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 6Medium 8Low 0
Watch
Add GS1900-8HP firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-7273 In wildKEV | 8.8 | Jun 16 | Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability Affected: <= 2.90(AAHI.1)C0 |
| CVE-2019-15800 | 9.8 | Nov 14 | An issue was discovered on Zyxel GS1900 devices with firmware before 2.50(AAHH.0)C0 Affected: before 2.50\(aahi.0\)c0 |
| CVE-2019-15803 | 9.1 | Nov 14 | An issue was discovered on Zyxel GS1900 devices with firmware before 2.50(AAHH.0)C0 Affected: before 2.50\(aahi.0\)c0 |
| CVE-2019-15799 | 8.8 | Nov 14 | An issue was discovered on Zyxel GS1900 devices with firmware before 2.50(AAHH.0)C0 Affected: before 2.50\(aahi.0\)c0 |
| CVE-2021-35031 | 8.0 | Dec 28 | A vulnerability in the TFTP client of Zyxel GS1900 series firmware, XGS1210 series firmware, and XGS1250 series firmware, which could allow an authenticated LAN user to execute… Affected: before 2.70\(aahi.0\)-20211208 |
| CVE-2021-35032 | 7.8 | Dec 28 | A vulnerability in the 'libsal.so' of the Zyxel GS1900 series firmware version 2.60 could allow an authenticated local user to execute arbitrary OS commands via a crafted function… Affected: before 2.70\(aahi.0\)-20211208 |
| CVE-2019-15804 | 7.5 | Nov 14 | An issue was discovered on Zyxel GS1900 devices with firmware before 2.50(AAHH.0)C0 Affected: before 2.50\(aahi.0\)c0 |
| CVE-2019-15801 | 7.5 | Nov 14 | An issue was discovered on Zyxel GS1900 devices with firmware before 2.50(AAHH.0)C0 Affected: before 2.50\(aahi.0\)c0 |
| CVE-2024-8881 | 6.8 | Nov 12 | A post-authentication command injection vulnerability in the CGI program in the Zyxel GS1900-48 switch firmware version V2.80(AAHN.1)C0 and earlier could allow an authenticated,… Affected: before 2.90\(aahi.0\)c0 |
| CVE-2022-45853 | 6.7 | May 30 | The privilege escalation vulnerability in the Zyxel GS1900-8 firmware version V2.70(AAHH.3) and the GS1900-8HP firmware version V2.70(AAHI.3) could allow an authenticated, local… Affected: 2.70(aahi.3) |
| CVE-2024-38270 | 6.5 | Sep 10 | An insufficient entropy vulnerability caused by the improper use of a randomness function with low entropy for web authentication tokens generation exists in the Zyxel GS1900-10HP… Affected: before 2.80\(aahi.1\)c0 |
| CVE-2022-34746 | 5.9 | Sep 20 | An insufficient entropy vulnerability caused by the improper use of randomness sources with low entropy for RSA key pair generation was found in Zyxel GS1900 series firmware… Affected: before 2.70\(aahi.3\)c0 |
| CVE-2019-15802 | 5.9 | Nov 14 | An issue was discovered on Zyxel GS1900 devices with firmware before 2.50(AAHH.0)C0 Affected: before 2.50\(aahi.0\)c0 |
| CVE-2023-35140 | 5.5 | Nov 7 | The improper privilege management vulnerability in the Zyxel GS1900-24EP switch firmware version V2.70(ABTO.5) could allow an authenticated local user with read-only access to… Affected: through 2.70\(aahi.5\) |
| CVE-2024-8882 | 4.5 | Nov 12 | A buffer overflow vulnerability in the CGI program in the Zyxel GS1900-48 switch firmware version V2.80(AAHN.1)C0 and earlier could allow an authenticated, LAN-based attacker with… Affected: before 2.90\(aahi.0\)c0 |
| CVE-2021-35030 | 4.3 | Jul 26 | A vulnerability was found in the CGI program in Zyxel GS1900-8 firmware version V2.60, that did not properly sterilize packet contents and could allow an authenticated, local user… Affected: before 2.70 |
Showing 16