GCVE - cpe:2.3:o:zyxel:gs1900-8hp_firmware:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:zyxel:gs1900-8hp_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

Vendor	Zyxel (`d3fcf896-5708-55f8-8f74-3e19a9d55b89`)
Product	Gs1900 8Hp Firmware (`f71e8d0c-4156-5bbd-9c24-da96a763f068`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-8882`	vulnerable	2026-06-08 07:00:25.919994	Details available MEDIUM (4.5) A buffer overflow vulnerability in the CGI program in the Zyxel GS1900-48 switch firmware version V2.80(AAHN.1)C0 and earlier could allow an authenticated, LAN-based attacker with administrator privileges to cause denial of service (DoS) conditions via a crafted URL. Published: 2024-11-12T01:23:57.405Z Updated: 2024-11-12T14:27:10.174Z Open on db.gcve.eu Reference links https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-post-authentication-command-injection-and-buffer-overflow-vulnerabilities-in-gs1900-series-switches-11-12-2024	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-8881`	vulnerable	2026-06-08 07:00:25.906438	Details available MEDIUM (6.8) A post-authentication command injection vulnerability in the CGI program in the Zyxel GS1900-48 switch firmware version V2.80(AAHN.1)C0 and earlier could allow an authenticated, LAN-based attacker with administrator privileges to execute some operating system (OS) commands on an affected device by sending a crafted HTTP request. Published: 2024-11-12T01:17:36.728Z Updated: 2024-11-12T16:16:27.550Z Open on db.gcve.eu Reference links https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-post-authentication-command-injection-and-buffer-overflow-vulnerabilities-in-gs1900-series-switches-11-12-2024	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-38270`	vulnerable	2026-06-08 06:41:44.771712	Details available MEDIUM (5.3) An insufficient entropy vulnerability caused by the improper use of a randomness function with low entropy for web authentication tokens generation exists in the Zyxel GS1900-10HP firmware version V2.80(AAZI.0)C0. This vulnerability could allow a LAN-based attacker a slight chance to gain a valid session token if multiple authenticated sessions are alive. Published: 2024-09-10T01:20:09.147Z Updated: 2024-09-10T15:15:34.477Z Open on db.gcve.eu Reference links https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-insufficient-entropy-vulnerability-for-web-authentication-tokens-generation-in-gs1900-series-switches-09-10-2024	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-35140`	vulnerable	2026-06-08 06:06:26.632550	Details available MEDIUM (5.5) The improper privilege management vulnerability in the Zyxel GS1900-24EP switch firmware version V2.70(ABTO.5) could allow an authenticated local user with read-only access to modify system settings on a vulnerable device. Published: 2023-11-07T01:44:18.953Z Updated: 2024-09-04T18:54:22.844Z Open on db.gcve.eu Reference links https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-improper-privilege-management-vulnerability-in-gs1900-series-switches	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-34746`	vulnerable	2026-06-08 05:46:03.353158	Details available MEDIUM (5.9) An insufficient entropy vulnerability caused by the improper use of randomness sources with low entropy for RSA key pair generation was found in Zyxel GS1900 series firmware versions prior to V2.70. This vulnerability could allow an unauthenticated attacker to retrieve a private key by factoring the RSA modulus N in the certificate of the web administration interface. Published: 2022-09-20T01:50:09.000Z Updated: 2025-05-29T13:42:48.236Z Open on db.gcve.eu Reference links https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-insufficient-entropy-vulnerability-of-gs1900-series-switches	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-35032`	vulnerable	2026-06-08 05:32:17.473574	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-35031`	vulnerable	2026-06-08 05:32:17.467521	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-35030`	vulnerable	2026-06-08 05:32:17.451971	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-15804`	vulnerable	2026-06-08 05:12:58.039020	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-15803`	vulnerable	2026-06-08 05:12:58.038161	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-15802`	vulnerable	2026-06-08 05:12:58.037075	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-15801`	vulnerable	2026-06-08 05:12:58.036038	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-15800`	vulnerable	2026-06-08 05:12:58.034859	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-15799`	vulnerable	2026-06-08 05:12:58.023228	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.