Gs1900-10hp Firmware (Zyxel) - vulnerabilities (CVEs)

35 CVEs, 0 in the last 30 days, 17 known versions, newest CVE from 2026-06-16. Vendor: Zyxel.

CVEs of Gs1900-10hp Firmware

• CVE-2026-7273 - CVSS 8.8 (high), 2026-06-16: A stack-based buffer overflow vulnerability in the CGI program of Zyxel GS1900-48HPv2 firmware versions through 2.90(ABTQ.1)C0 could allow a LAN-based,…
• CVE-2024-8882 - CVSS 4.5 (medium), 2024-11-12: A buffer overflow vulnerability in the CGI program in the Zyxel GS1900-48 switch firmware version V2.80(AAHN.1)C0 and earlier could allow an authenticated,…
• CVE-2024-8881 - CVSS 6.8 (medium), 2024-11-12: A post-authentication command injection vulnerability in the CGI program in the Zyxel GS1900-48 switch firmware version V2.80(AAHN.1)C0 and earlier could…
• CVE-2024-38270 - CVSS 6.5 (medium), 2024-09-10: An insufficient entropy vulnerability caused by the improper use of a randomness function with low entropy for web authentication tokens generation exists in…
• CVE-2023-35140 - CVSS 5.5 (medium), 2023-11-07: The improper privilege management vulnerability in the Zyxel GS1900-24EP switch firmware version V2.70(ABTO.5) could allow an authenticated local user with…
• CVE-2022-45853 - CVSS 6.7 (medium), 2023-05-30: The privilege escalation vulnerability in the Zyxel GS1900-8 firmware version V2.70(AAHH.3) and the GS1900-8HP firmware version V2.70(AAHI.3) could allow an…
• CVE-2022-34746 - CVSS 5.9 (medium), 2022-09-20: An insufficient entropy vulnerability caused by the improper use of randomness sources with low entropy for RSA key pair generation was found in Zyxel GS1900…
• CVE-2021-35031 - CVSS 8 (high), 2021-12-28: A vulnerability in the TFTP client of Zyxel GS1900 series firmware, XGS1210 series firmware, and XGS1250 series firmware, which could allow an authenticated…
• CVE-2021-35032 - CVSS 7.8 (high), 2021-12-28: A vulnerability in the 'libsal.so' of the Zyxel GS1900 series firmware version 2.60 could allow an authenticated local user to execute arbitrary OS commands…
• CVE-2021-35030 - CVSS 4.3 (medium), 2021-07-26: A vulnerability was found in the CGI program in Zyxel GS1900-8 firmware version V2.60, that did not properly sterilize packet contents and could allow an…
• CVE-2019-15800 - CVSS 9.8 (critical), 2019-11-14: An issue was discovered on Zyxel GS1900 devices with firmware before 2.50(AAHH.0)C0. Due to lack of input validation in the cmd_sys_traceroute_exec(),…
• CVE-2019-15803 - CVSS 9.1 (critical), 2019-11-14: An issue was discovered on Zyxel GS1900 devices with firmware before 2.50(AAHH.0)C0. Through an undocumented sequence of keypresses, undocumented…
• CVE-2019-15799 - CVSS 8.8 (high), 2019-11-14: An issue was discovered on Zyxel GS1900 devices with firmware before 2.50(AAHH.0)C0. User accounts created through the web interface of the device, when given…
• CVE-2019-15802 - CVSS 5.9 (medium), 2019-11-14: An issue was discovered on Zyxel GS1900 devices with firmware before 2.50(AAHH.0)C0. The firmware hashes and encrypts passwords using a hardcoded…
• CVE-2019-15801 - CVSS 7.5 (high), 2019-11-14: An issue was discovered on Zyxel GS1900 devices with firmware before 2.50(AAHH.0)C0. The firmware image contains encrypted passwords that are used to…
• CVE-2019-15804 - CVSS 7.5 (high), 2019-11-14: An issue was discovered on Zyxel GS1900 devices with firmware before 2.50(AAHH.0)C0. By sending a signal to the CLI process, undocumented functionality is…
• CVE-2016-1346 - CVSS 5.9 (medium), 2016-04-06: The kernel in Cisco TelePresence Server 3.0 through 4.2(4.18) on Mobility Services Engine (MSE) 8710 devices allows remote attackers to cause a denial of…
• CVE-2015-6313 - CVSS 7.5 (high), 2016-04-06: Cisco TelePresence Server 4.1(2.29) through 4.2(4.17) on 7010; Mobility Services Engine (MSE) 8710; Multiparty Media 310, 320, and 820; and Virtual Machine…
• CVE-2015-6312 - CVSS 7.5 (high), 2016-04-06: Cisco TelePresence Server 3.1 on 7010, Mobility Services Engine (MSE) 8710, Multiparty Media 310 and 320, and Virtual Machine (VM) devices allows remote…
• CVE-2016-1350 - CVSS 7.5 (high), 2016-03-26: Cisco IOS 15.3 and 15.4, Cisco IOS XE 3.8 through 3.11, and Cisco Unified Communications Manager allow remote attackers to cause a denial of service (device…
• CVE-2016-1349 - CVSS 7.5 (high), 2016-03-26: The Smart Install client implementation in Cisco IOS 12.2, 15.0, and 15.2 and IOS XE 3.2 through 3.7 allows remote attackers to cause a denial of service…
• CVE-2016-1348 - CVSS 7.5 (high), 2016-03-26: Cisco IOS 15.0 through 15.5 and IOS XE 3.3 through 3.16 allow remote attackers to cause a denial of service (device reload) via a crafted DHCPv6 Relay…
• CVE-2016-1344 - CVSS 5.9 (medium), 2016-03-26: The IKEv2 implementation in Cisco IOS 15.0 through 15.6 and IOS XE 3.3 through 3.17 allows remote attackers to cause a denial of service (device reload) via…
• CVE-2015-6260 - CVSS 7.5 (high), 2016-03-03: Cisco NX-OS 7.1(1)N1(1) on Nexus 5500, 5600, and 6000 devices does not properly validate PDUs in SNMP packets, which allows remote attackers to cause a denial…
• CVE-2015-0718 - CVSS 7.5 (high), 2016-03-03: Cisco NX-OS 4.0 through 6.1 on Nexus 1000V 3000, 4000, 5000, 6000, and 7000 devices and Unified Computing System (UCS) platforms allows remote attackers to…
• CVE-2016-1329 - CVSS 9.8 (critical), 2016-03-03: Cisco NX-OS 6.0(2)U6(1) through 6.0(2)U6(5) on Nexus 3000 devices and 6.0(2)A6(1) through 6.0(2)A6(5) and 6.0(2)A7(1) on Nexus 3500 devices has hardcoded…
• CVE-2016-1319 - CVSS 5.3 (medium), 2016-02-09: Cisco Unified Communications Manager (aka CallManager) 9.1(2.10000.28), 10.5(2.10000.5), 10.5(2.12901.1), and 11.0(1.10000.10); Unified Communications Manager…
• CVE-2016-1317 - CVSS 4.3 (medium), 2016-02-09: Cisco Unified Communications Manager 11.5(0.98000.480) allows remote authenticated users to obtain sensitive database table-name and entity-name information…
• CVE-2016-1307 - CVSS 5.4 (medium), 2016-02-07: The Openfire server in Cisco Finesse Desktop 10.5(1) and 11.0(1) and Unified Contact Center Express 10.6(1) has a hardcoded account, which makes it easier for…
• CVE-2016-1302 - CVSS 8.8 (high), 2016-02-07: Cisco Application Policy Infrastructure Controller (APIC) devices with software before 1.0(3h) and 1.1 before 1.1(1j) and Nexus 9000 ACI Mode switches with…
• CVE-2015-6398 - CVSS 7.5 (high), 2016-02-07: Cisco Nexus 9000 Application Centric Infrastructure (ACI) Mode switches with software before 11.0(1c) allow remote attackers to cause a denial of service…
• CVE-2015-5990 - CVSS 8.8 (high), 2015-12-31: Cross-site request forgery (CSRF) vulnerability on Belkin F9K1102 2 devices with firmware 2.10.17 allows remote attackers to hijack the authentication of…
• CVE-2015-5989 - CVSS 9.8 (critical), 2015-12-31: Belkin F9K1102 2 devices with firmware 2.10.17 rely on client-side JavaScript code for authorization, which allows remote attackers to obtain administrative…
• CVE-2015-5988 - CVSS 9.8 (critical), 2015-12-31: The web management interface on Belkin F9K1102 2 devices with firmware 2.10.17 has a blank password, which allows remote attackers to obtain administrative…
• CVE-2015-5987 - CVSS 8.6 (high), 2015-12-31: Belkin F9K1102 2 devices with firmware 2.10.17 use an improper algorithm for selecting the ID value in the header of a DNS query, which makes it easier for…