Zyxel Gs1900-24hpv2 Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Zyxel Gs1900-24hpv2 Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (9)

• CVE-2021-35031 — CVSS 6.8 (medium): A vulnerability in the TFTP client of Zyxel GS1900 series firmware, XGS1210 series firmware, and XGS1250 series firmware, which could allow…
• CVE-2024-8881 — CVSS 6.8 (medium): A post-authentication command injection vulnerability in the CGI program in the Zyxel GS1900-48 switch firmware version V2.80(AAHN.1)C0 and…
• CVE-2022-45853 — CVSS 6.7 (medium): The privilege escalation vulnerability in the Zyxel GS1900-8 firmware version V2.70(AAHH.3) and the GS1900-8HP firmware version…
• CVE-2021-35032 — CVSS 6.4 (medium): A vulnerability in the 'libsal.so' of the Zyxel GS1900 series firmware version 2.60 could allow an authenticated local user to execute…
• CVE-2022-34746 — CVSS 5.9 (medium): An insufficient entropy vulnerability caused by the improper use of randomness sources with low entropy for RSA key pair generation was…
• CVE-2023-35140 — CVSS 5.5 (medium): The improper privilege management vulnerability in the Zyxel GS1900-24EP switch firmware version V2.70(ABTO.5) could allow an authenticated…
• CVE-2024-38270 — CVSS 5.3 (medium): An insufficient entropy vulnerability caused by the improper use of a randomness function with low entropy for web authentication tokens…
• CVE-2024-8882 — CVSS 4.5 (medium): A buffer overflow vulnerability in the CGI program in the Zyxel GS1900-48 switch firmware version V2.80(AAHN.1)C0 and earlier could allow…
• CVE-2021-35030 — CVSS 3.5 (low): A vulnerability was found in the CGI program in Zyxel GS1900-8 firmware version V2.60, that did not properly sterilize packet contents and…