NetSight
IP …
low3.5

CVE-2021-35030

A vulnerability was found in the CGI program in Zyxel GS1900-8 firmware version V2.60, that did not properly sterilize packet contents and could allow an authe…

Impact

A vulnerability was found in the CGI program in Zyxel GS1900-8 firmware version V2.60, that did not properly sterilize packet contents and could allow an authenticated, local user to perform a cross-site scripting (XSS) attack via a crafted LLDP packet.

Affected products

VendorProductAffected versions
ZyxelGs1900-8 Firmware
before 2.70
ZyxelGs1900-8hp Firmware
before 2.70
ZyxelGs1900-10hp Firmware
before 2.70
ZyxelGs1900-16 Firmware
before 2.70
ZyxelGs1900-24e Firmware
before 2.70
ZyxelGs1900-24ep Firmware
before 2.70
ZyxelGs1900-24 Firmware
before 2.70
ZyxelGs1900-24hp Firmware
before 2.70
ZyxelGs1900-24hpv2 Firmware
before 2.70
ZyxelGs1900-48 Firmware
before 2.70
ZyxelGs1900-48hp Firmware
before 2.70
ZyxelGs1900-48hpv2 Firmware
before 2.70

Weakness classification

CWE-79

References