Approved changes feed: RSS · Atom

cpe:2.3:h:zyxel:gs1900-10hp:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorZyxel (d3fcf896-5708-55f8-8f74-3e19a9d55b89)
ProductGs1900 10Hp (923e9f5b-6309-5b56-b2f7-a1592a3052a0)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-8882 not_vulnerable 2026-06-08 07:00:25.920176 Details available
MEDIUM (4.5)
A buffer overflow vulnerability in the CGI program in the Zyxel GS1900-48 switch firmware version V2.80(AAHN.1)C0 and earlier could allow an authenticated, LAN-based attacker with administrator privileges to cause denial of service (DoS) conditions via a crafted URL.
Published: 2024-11-12T01:23:57.405Z
Updated: 2024-11-12T14:27:10.174Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-8881 not_vulnerable 2026-06-08 07:00:25.909637 Details available
MEDIUM (6.8)
A post-authentication command injection vulnerability in the CGI program in the Zyxel GS1900-48 switch firmware version V2.80(AAHN.1)C0 and earlier could allow an authenticated, LAN-based attacker with administrator privileges to execute some operating system (OS) commands on an affected device by sending a crafted HTTP request.
Published: 2024-11-12T01:17:36.728Z
Updated: 2024-11-12T16:16:27.550Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-38270 not_vulnerable 2026-06-08 06:41:44.771041 Details available
MEDIUM (5.3)
An insufficient entropy vulnerability caused by the improper use of a randomness function with low entropy for web authentication tokens generation exists in the Zyxel GS1900-10HP firmware version V2.80(AAZI.0)C0. This vulnerability could allow a LAN-based attacker a slight chance to gain a valid session token if multiple authenticated sessions are alive.
Published: 2024-09-10T01:20:09.147Z
Updated: 2024-09-10T15:15:34.477Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-35140 not_vulnerable 2026-06-08 06:06:26.632006 Details available
MEDIUM (5.5)
The improper privilege management vulnerability in the Zyxel GS1900-24EP switch firmware version V2.70(ABTO.5) could allow an authenticated local user with read-only access to modify system settings on a vulnerable device.
Published: 2023-11-07T01:44:18.953Z
Updated: 2024-09-04T18:54:22.844Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-45853 not_vulnerable 2026-06-08 05:50:37.340993 Details available
MEDIUM (6.7)
The privilege escalation vulnerability in the Zyxel GS1900-8 firmware version V2.70(AAHH.3) and the GS1900-8HP firmware version V2.70(AAHI.3) could allow an authenticated, local attacker with administrator privileges to execute some system commands as 'root' on a vulnerable device via SSH.
Published: 2023-05-30T10:02:46.637Z
Updated: 2025-01-10T17:32:54.505Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-34746 not_vulnerable 2026-06-08 05:46:03.356192 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-35032 not_vulnerable 2026-06-08 05:32:17.473629 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-35031 not_vulnerable 2026-06-08 05:32:17.467578 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-35030 not_vulnerable 2026-06-08 05:32:17.454221 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-15804 not_vulnerable 2026-06-08 05:12:58.039071 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-15803 not_vulnerable 2026-06-08 05:12:58.038213 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-15802 not_vulnerable 2026-06-08 05:12:58.037126 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-15801 not_vulnerable 2026-06-08 05:12:58.036190 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-15800 not_vulnerable 2026-06-08 05:12:58.034913 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-15799 not_vulnerable 2026-06-08 05:12:58.025477 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.