Unrated severityNVD Advisory· Published Dec 28, 2021· Updated Aug 4, 2024

CVE-2021-35031

Description

A vulnerability in the TFTP client of Zyxel GS1900 series firmware, XGS1210 series firmware, and XGS1250 series firmware, which could allow an authenticated LAN user to execute arbitrary OS commands via the GUI of the vulnerable device.

Affected products

Zyxel/XGS1210 seriesllm-create2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: 1.00(ABTY.4)C0
Zyxel/XGS1250 seriesllm-create2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: 1.00(ABWE.0)C0
Zyxel/GS1900 seriesllm-fuzzy
Zyxel/Gs1900 10hp Firmwarecpe-rescue
Range: 2.60

Patches

Vulnerability mechanics

References

www.zyxel.com/support/Zyxel_security_advisory_for_OS_command_injection_vulnerabilities_of_switches.shtmlmitrex_refsource_CONFIRM

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000