Количество 3
Количество 3
CVE-2024-8881
A post-authentication command injection vulnerability in the CGI program in the Zyxel GS1900-48 switch firmware version V2.80(AAHN.1)C0 and earlier could allow an authenticated, LAN-based attacker with administrator privileges to execute some operating system (OS) commands on an affected device by sending a crafted HTTP request.
GHSA-6g24-jp4w-4mmm
A post-authentication command injection vulnerability in the CGI program in the Zyxel GS1900-48 switch firmware version V2.80(AAHN.1)C0 and earlier could allow an authenticated, LAN-based attacker with administrator privileges to execute some operating system (OS) commands on an affected device by sending a crafted HTTP request.
BDU:2024-09685
Уязвимость интерфейса CGI микропрограммного обеспечения маршрутизаторов Zyxel серии GS1900, позволяющая нарушителю выполнить произвольные команды
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2024-8881 A post-authentication command injection vulnerability in the CGI program in the Zyxel GS1900-48 switch firmware version V2.80(AAHN.1)C0 and earlier could allow an authenticated, LAN-based attacker with administrator privileges to execute some operating system (OS) commands on an affected device by sending a crafted HTTP request. | CVSS3: 6.8 | 0% Низкий | около 1 года назад |
| GHSA-6g24-jp4w-4mmm A post-authentication command injection vulnerability in the CGI program in the Zyxel GS1900-48 switch firmware version V2.80(AAHN.1)C0 and earlier could allow an authenticated, LAN-based attacker with administrator privileges to execute some operating system (OS) commands on an affected device by sending a crafted HTTP request. | CVSS3: 6.8 | 0% Низкий | около 1 года назад |
 | BDU:2024-09685 Уязвимость интерфейса CGI микропрограммного обеспечения маршрутизаторов Zyxel серии GS1900, позволяющая нарушителю выполнить произвольные команды | CVSS3: 6.8 | 0% Низкий | около 1 года назад |
Уязвимостей на страницу