Vulnerability Database

289,697

Total vulnerabilities in the database

CVE-2023-35140

The improper privilege management vulnerability in the Zyxel GS1900-24EP switch firmware version V2.70(ABTO.5) could allow an authenticated local user with read-only access to modify system settings on a vulnerable device.

  • Published: Nov 7, 2023
  • Updated: Nov 23, 2023
  • CVE: CVE-2023-35140
  • Severity: Medium
  • Exploit:

CVSS v3:

  • Severity: Medium
  • Score: 5.5
  • AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

CWEs:

Software From Fixed in
zyxel / gs1900-48hpv2_firmware - 2.70\(abtq.5\).x
zyxel / gs1900-48_firmware - 2.70\(aahn.5\).x
zyxel / gs1900-24hpv2_firmware - 2.70\(abtp.5\).x
zyxel / gs1900-24ep_firmware - 2.70\(abto.5\).x
zyxel / gs1900-24e_firmware - 2.70\(aahk.5\).x
zyxel / gs1900-24_firmware - 2.70\(aahl.5\).x
zyxel / gs1900-16_firmware - 2.70\(aahj.5\).x
zyxel / gs1900-10hp_firmware - 2.70\(aazi.5\).x
zyxel / gs1900-8hp_firmware - 2.70\(aahi.5\).x
zyxel / gs1900-8_firmware - 2.70\(aahh.5\).x