CVE-2024-8881
Essential information
- Published
- 12/11/2024 02:15
- Modified
- 14/11/2024 13:51
- Author
- —
- Creator
- —
- CVSS
- 6.8 MEDIUM (v3.1)
- CISA KEV
- No
- CWE
- —
- CVSS vector
-
—
CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H—
CVSS metrics
- Access vector
- —
- Access complexity
- —
- Authentication
- —
- Confidentiality impact
- —
- Integrity impact
- —
- Availability impact
- —
- Exploitability
- —
- Remediation level
- —
- Report confidence
- —
- Temporal score
- —
- Attack vector
- ADJACENT_NETWORK
- Attack complexity
- LOW
- Privileges required
- HIGH
- User interaction
- NONE
- Scope
- UNCHANGED
- Confidentiality impact
- HIGH
- Integrity impact
- HIGH
- Availability impact
- HIGH
- Exploit code maturity
- —
- Remediation level
- —
- Report confidence
- —
- Temporal score
- —
- Attack vector
- —
- Attack complexity
- —
- Attack requirements
- —
- Privileges required
- —
- User interaction
- —
- Confidentiality (V)
- —
- Confidentiality (S)
- —
- Integrity (V)
- —
- Integrity (S)
- —
- Availability (V)
- —
- Availability (S)
- —
- Exploit maturity
- —
Description
A post-authentication command injection vulnerability in the CGI program in the Zyxel GS1900-48 switch firmware version V2.80(AAHN.1)C0 and earlier could allow an authenticated, LAN-based attacker with administrator privileges to execute some operating system (OS) commands on an affected device by sending a crafted HTTP request.
NVD status
- Status
- Analyzed — CVE has been recently published to the CVE List and has been received by the NVD.
- Source
- [email protected]
- NVD
- View on NVD
Affected products (CPE)
| Product | CPE |
|---|---|
| zyxel / gs1900-8 firmware | cpe:2.3:o:zyxel:gs1900-8_firmware:*:*:*:*:*:*:*:* |
| zyxel / gs1900-8 | cpe:2.3:h:zyxel:gs1900-8:-:*:*:*:*:*:*:* |
| zyxel / gs1900-8hp firmware | cpe:2.3:o:zyxel:gs1900-8hp_firmware:*:*:*:*:*:*:*:* |
| zyxel / gs1900-8hp | cpe:2.3:h:zyxel:gs1900-8hp:-:*:*:*:*:*:*:* |
| zyxel / gs1900-10hp firmware | cpe:2.3:o:zyxel:gs1900-10hp_firmware:*:*:*:*:*:*:*:* |
| zyxel / gs1900-10hp | cpe:2.3:h:zyxel:gs1900-10hp:-:*:*:*:*:*:*:* |
| zyxel / gs1900-16 firmware | cpe:2.3:o:zyxel:gs1900-16_firmware:*:*:*:*:*:*:*:* |
| zyxel / gs1900-16 | cpe:2.3:h:zyxel:gs1900-16:-:*:*:*:*:*:*:* |
| zyxel / gs1900-24 firmware | cpe:2.3:o:zyxel:gs1900-24_firmware:*:*:*:*:*:*:*:* |
| zyxel / gs1900-24 | cpe:2.3:h:zyxel:gs1900-24:-:*:*:*:*:*:*:* |
| zyxel / gs1900-24e firmware | cpe:2.3:o:zyxel:gs1900-24e_firmware:*:*:*:*:*:*:*:* |
| zyxel / gs1900-24e | cpe:2.3:h:zyxel:gs1900-24e:-:*:*:*:*:*:*:* |
| zyxel / gs1900-24ep firmware | cpe:2.3:o:zyxel:gs1900-24ep_firmware:*:*:*:*:*:*:*:* |
| zyxel / gs1900-24ep | cpe:2.3:h:zyxel:gs1900-24ep:-:*:*:*:*:*:*:* |
| zyxel / gs1900-24hpv2 firmware | cpe:2.3:o:zyxel:gs1900-24hpv2_firmware:*:*:*:*:*:*:*:* |
| zyxel / gs1900-24hpv2 | cpe:2.3:h:zyxel:gs1900-24hpv2:-:*:*:*:*:*:*:* |
| zyxel / gs1900-48 firmware | cpe:2.3:o:zyxel:gs1900-48_firmware:*:*:*:*:*:*:*:* |
| zyxel / gs1900-48 | cpe:2.3:h:zyxel:gs1900-48:-:*:*:*:*:*:*:* |
| zyxel / gs1900-48hpv2 firmware | cpe:2.3:o:zyxel:gs1900-48hpv2_firmware:*:*:*:*:*:*:*:* |
| zyxel / gs1900-48hpv2 | cpe:2.3:h:zyxel:gs1900-48hpv2:-:*:*:*:*:*:*:* |