Vulnerabilities > Zyxel > Gs1900 24Hp Firmware

DATE CVE VULNERABILITY TITLE RISK
2021-12-28 CVE-2021-35031 OS Command Injection vulnerability in Zyxel products
A vulnerability in the TFTP client of Zyxel GS1900 series firmware, XGS1210 series firmware, and XGS1250 series firmware, which could allow an authenticated LAN user to execute arbitrary OS commands via the GUI of the vulnerable device.
low complexity
zyxel CWE-78
8.0
2021-12-28 CVE-2021-35032 OS Command Injection vulnerability in Zyxel products
A vulnerability in the 'libsal.so' of the Zyxel GS1900 series firmware version 2.60 could allow an authenticated local user to execute arbitrary OS commands via a crafted function call.
local
low complexity
zyxel CWE-78
7.8
2021-07-26 CVE-2021-35030 Cross-site Scripting vulnerability in Zyxel products
A vulnerability was found in the CGI program in Zyxel GS1900-8 firmware version V2.60, that did not properly sterilize packet contents and could allow an authenticated, local user to perform a cross-site scripting (XSS) attack via a crafted LLDP packet.
low complexity
zyxel CWE-79
4.3
2019-11-14 CVE-2019-15804 Unspecified vulnerability in Zyxel products
An issue was discovered on Zyxel GS1900 devices with firmware before 2.50(AAHH.0)C0.
network
low complexity
zyxel
7.5
2019-11-14 CVE-2019-15803 Improper Authentication vulnerability in Zyxel products
An issue was discovered on Zyxel GS1900 devices with firmware before 2.50(AAHH.0)C0.
network
low complexity
zyxel CWE-287
critical
9.1
2019-11-14 CVE-2019-15802 Use of Hard-coded Credentials vulnerability in Zyxel products
An issue was discovered on Zyxel GS1900 devices with firmware before 2.50(AAHH.0)C0.
network
high complexity
zyxel CWE-798
5.9
2019-11-14 CVE-2019-15801 Use of Hard-coded Credentials vulnerability in Zyxel products
An issue was discovered on Zyxel GS1900 devices with firmware before 2.50(AAHH.0)C0.
network
low complexity
zyxel CWE-798
7.5
2019-11-14 CVE-2019-15800 OS Command Injection vulnerability in Zyxel products
An issue was discovered on Zyxel GS1900 devices with firmware before 2.50(AAHH.0)C0.
network
low complexity
zyxel CWE-78
critical
9.8
2019-11-14 CVE-2019-15799 Improper Privilege Management vulnerability in Zyxel products
An issue was discovered on Zyxel GS1900 devices with firmware before 2.50(AAHH.0)C0.
network
low complexity
zyxel CWE-269
8.8