Approved changes feed: RSS · Atom

cpe:2.3:h:zyxel:gs1900-24hpv2:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorZyxel (d3fcf896-5708-55f8-8f74-3e19a9d55b89)
ProductGs1900 24Hpv2 (dd0deaf2-b543-5626-b87f-ef2b5beb600e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-8882 not_vulnerable 2026-06-08 07:00:25.920566 Details available
MEDIUM (4.5)
A buffer overflow vulnerability in the CGI program in the Zyxel GS1900-48 switch firmware version V2.80(AAHN.1)C0 and earlier could allow an authenticated, LAN-based attacker with administrator privileges to cause denial of service (DoS) conditions via a crafted URL.
Published: 2024-11-12T01:23:57.405Z
Updated: 2024-11-12T14:27:10.174Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-8881 not_vulnerable 2026-06-08 07:00:25.916968 Details available
MEDIUM (6.8)
A post-authentication command injection vulnerability in the CGI program in the Zyxel GS1900-48 switch firmware version V2.80(AAHN.1)C0 and earlier could allow an authenticated, LAN-based attacker with administrator privileges to execute some operating system (OS) commands on an affected device by sending a crafted HTTP request.
Published: 2024-11-12T01:17:36.728Z
Updated: 2024-11-12T16:16:27.550Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-38270 not_vulnerable 2026-06-08 06:41:44.762623 Details available
MEDIUM (5.3)
An insufficient entropy vulnerability caused by the improper use of a randomness function with low entropy for web authentication tokens generation exists in the Zyxel GS1900-10HP firmware version V2.80(AAZI.0)C0. This vulnerability could allow a LAN-based attacker a slight chance to gain a valid session token if multiple authenticated sessions are alive.
Published: 2024-09-10T01:20:09.147Z
Updated: 2024-09-10T15:15:34.477Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-35140 not_vulnerable 2026-06-08 06:06:26.624300 Details available
MEDIUM (5.5)
The improper privilege management vulnerability in the Zyxel GS1900-24EP switch firmware version V2.70(ABTO.5) could allow an authenticated local user with read-only access to modify system settings on a vulnerable device.
Published: 2023-11-07T01:44:18.953Z
Updated: 2024-09-04T18:54:22.844Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-45853 not_vulnerable 2026-06-08 05:50:37.348984 Details available
MEDIUM (6.7)
The privilege escalation vulnerability in the Zyxel GS1900-8 firmware version V2.70(AAHH.3) and the GS1900-8HP firmware version V2.70(AAHI.3) could allow an authenticated, local attacker with administrator privileges to execute some system commands as 'root' on a vulnerable device via SSH.
Published: 2023-05-30T10:02:46.637Z
Updated: 2025-01-10T17:32:54.505Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-34746 not_vulnerable 2026-06-08 05:46:03.370785 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-35032 not_vulnerable 2026-06-08 05:32:17.473826 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-35031 not_vulnerable 2026-06-08 05:32:17.467779 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-35030 not_vulnerable 2026-06-08 05:32:17.461052 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.