medium5.5
CVE-2023-35140
The improper privilege management vulnerability in the Zyxel GS1900-24EP switch firmware version V2.70(ABTO.5) could allow an authenticated local user with rea…
Impact
The improper privilege management vulnerability in the Zyxel GS1900-24EP switch firmware version V2.70(ABTO.5) could allow an authenticated local user with read-only access to modify system settings on a vulnerable device.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zyxel | Gs1900-48hpv2 Firmware | through 2.70\(abtq.5\) |
| Zyxel | Gs1900-48 Firmware | through 2.70\(aahn.5\) |
| Zyxel | Gs1900-24hpv2 Firmware | through 2.70\(abtp.5\) |
| Zyxel | Gs1900-24ep Firmware | through 2.70\(abto.5\) |
| Zyxel | Gs1900-24e Firmware | through 2.70\(aahk.5\) |
| Zyxel | Gs1900-24 Firmware | through 2.70\(aahl.5\) |
| Zyxel | Gs1900-16 Firmware | through 2.70\(aahj.5\) |
| Zyxel | Gs1900-10hp Firmware | through 2.70\(aazi.5\) |
| Zyxel | Gs1900-8hp Firmware | through 2.70\(aahi.5\) |
| Zyxel | Gs1900-8 Firmware | through 2.70\(aahh.5\) |
Weakness classification
References
- NVD record
- CVE.org record
- https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-improper-privilege-management-vulnerability-in-gs1900-series-switches
- https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-improper-privilege-management-vulnerability-in-gs1900-series-switches