High

DATE	CVE	VULNERABILITY TITLE	RISK
2021-12-28	CVE-2021-35031	OS Command Injection vulnerability in Zyxel products A vulnerability in the TFTP client of Zyxel GS1900 series firmware, XGS1210 series firmware, and XGS1250 series firmware, which could allow an authenticated LAN user to execute arbitrary OS commands via the GUI of the vulnerable device. low complexity zyxel CWE-78	8.0
2021-12-28	CVE-2021-35032	OS Command Injection vulnerability in Zyxel products A vulnerability in the 'libsal.so' of the Zyxel GS1900 series firmware version 2.60 could allow an authenticated local user to execute arbitrary OS commands via a crafted function call. local low complexity zyxel CWE-78	7.8