High

DATE	CVE	VULNERABILITY TITLE	RISK
2021-12-28	CVE-2021-35031	OS Command Injection vulnerability in Zyxel products A vulnerability in the TFTP client of Zyxel GS1900 series firmware, XGS1210 series firmware, and XGS1250 series firmware, which could allow an authenticated LAN user to execute arbitrary OS commands via the GUI of the vulnerable device. low complexity zyxel CWE-78	8.0
2021-12-28	CVE-2021-35032	OS Command Injection vulnerability in Zyxel products A vulnerability in the 'libsal.so' of the Zyxel GS1900 series firmware version 2.60 could allow an authenticated local user to execute arbitrary OS commands via a crafted function call. local low complexity zyxel CWE-78	7.8
2019-11-14	CVE-2019-15804	Unspecified vulnerability in Zyxel products An issue was discovered on Zyxel GS1900 devices with firmware before 2.50(AAHH.0)C0. network low complexity zyxel	7.5
2019-11-14	CVE-2019-15801	Use of Hard-coded Credentials vulnerability in Zyxel products An issue was discovered on Zyxel GS1900 devices with firmware before 2.50(AAHH.0)C0. network low complexity zyxel CWE-798	7.5
2019-11-14	CVE-2019-15799	Improper Privilege Management vulnerability in Zyxel products An issue was discovered on Zyxel GS1900 devices with firmware before 2.50(AAHH.0)C0. network low complexity zyxel CWE-269	8.8