Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2024-09-10	CVE-2024-38270	Insufficient Entropy vulnerability in Zyxel products An insufficient entropy vulnerability caused by the improper use of a randomness function with low entropy for web authentication tokens generation exists in the Zyxel GS1900-10HP firmware version V2.80(AAZI.0)C0. low complexity zyxel CWE-331	6.5
2023-11-07	CVE-2023-35140	Improper Privilege Management vulnerability in Zyxel products The improper privilege management vulnerability in the Zyxel GS1900-24EP switch firmware version V2.70(ABTO.5) could allow an authenticated local user with read-only access to modify system settings on a vulnerable device. local low complexity zyxel CWE-269	5.5
2023-05-30	CVE-2022-45853	Unspecified vulnerability in Zyxel products The privilege escalation vulnerability in the Zyxel GS1900-8 firmware version V2.70(AAHH.3) and the GS1900-8HP firmware version V2.70(AAHI.3) could allow an authenticated, local attacker with administrator privileges to execute some system commands as 'root' on a vulnerable device via SSH. local low complexity zyxel	6.7