GCVE - cpe:2.3:h:zyxel:gs1900-8hp:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:zyxel:gs1900-8hp:-:*:*:*:*:*:*:*

part: h version: - update: *

Vendor	Zyxel (`d3fcf896-5708-55f8-8f74-3e19a9d55b89`)
Product	Gs1900 8Hp (`22a3f131-3d91-5cf4-9920-387a43b1e57a`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-8882`	not_vulnerable	2026-06-08 07:00:25.920017	Details available MEDIUM (4.5) A buffer overflow vulnerability in the CGI program in the Zyxel GS1900-48 switch firmware version V2.80(AAHN.1)C0 and earlier could allow an authenticated, LAN-based attacker with administrator privileges to cause denial of service (DoS) conditions via a crafted URL. Published: 2024-11-12T01:23:57.405Z Updated: 2024-11-12T14:27:10.174Z Open on db.gcve.eu Reference links https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-post-authentication-command-injection-and-buffer-overflow-vulnerabilities-in-gs1900-series-switches-11-12-2024	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-8881`	not_vulnerable	2026-06-08 07:00:25.907535	Details available MEDIUM (6.8) A post-authentication command injection vulnerability in the CGI program in the Zyxel GS1900-48 switch firmware version V2.80(AAHN.1)C0 and earlier could allow an authenticated, LAN-based attacker with administrator privileges to execute some operating system (OS) commands on an affected device by sending a crafted HTTP request. Published: 2024-11-12T01:17:36.728Z Updated: 2024-11-12T16:16:27.550Z Open on db.gcve.eu Reference links https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-post-authentication-command-injection-and-buffer-overflow-vulnerabilities-in-gs1900-series-switches-11-12-2024	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-38270`	not_vulnerable	2026-06-08 06:41:44.772368	Details available MEDIUM (5.3) An insufficient entropy vulnerability caused by the improper use of a randomness function with low entropy for web authentication tokens generation exists in the Zyxel GS1900-10HP firmware version V2.80(AAZI.0)C0. This vulnerability could allow a LAN-based attacker a slight chance to gain a valid session token if multiple authenticated sessions are alive. Published: 2024-09-10T01:20:09.147Z Updated: 2024-09-10T15:15:34.477Z Open on db.gcve.eu Reference links https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-insufficient-entropy-vulnerability-for-web-authentication-tokens-generation-in-gs1900-series-switches-09-10-2024	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-35140`	not_vulnerable	2026-06-08 06:06:26.633057	Details available MEDIUM (5.5) The improper privilege management vulnerability in the Zyxel GS1900-24EP switch firmware version V2.70(ABTO.5) could allow an authenticated local user with read-only access to modify system settings on a vulnerable device. Published: 2023-11-07T01:44:18.953Z Updated: 2024-09-04T18:54:22.844Z Open on db.gcve.eu Reference links https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-improper-privilege-management-vulnerability-in-gs1900-series-switches	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-45853`	not_vulnerable	2026-06-08 05:50:37.339508	Details available MEDIUM (6.7) The privilege escalation vulnerability in the Zyxel GS1900-8 firmware version V2.70(AAHH.3) and the GS1900-8HP firmware version V2.70(AAHI.3) could allow an authenticated, local attacker with administrator privileges to execute some system commands as 'root' on a vulnerable device via SSH. Published: 2023-05-30T10:02:46.637Z Updated: 2025-01-10T17:32:54.505Z Open on db.gcve.eu Reference links https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-privilege-escalation-vulnerability-in-gs1900-series-switches	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-34746`	not_vulnerable	2026-06-08 05:46:03.354298	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-35032`	not_vulnerable	2026-06-08 05:32:17.473594	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-35031`	not_vulnerable	2026-06-08 05:32:17.467541	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-35030`	not_vulnerable	2026-06-08 05:32:17.452635	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-15804`	not_vulnerable	2026-06-08 05:12:58.039038	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-15803`	not_vulnerable	2026-06-08 05:12:58.038180	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-15802`	not_vulnerable	2026-06-08 05:12:58.037093	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-15801`	not_vulnerable	2026-06-08 05:12:58.036056	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-15800`	not_vulnerable	2026-06-08 05:12:58.034876	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-15799`	not_vulnerable	2026-06-08 05:12:58.023796	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.