CVE-2021-35031

EUVD-2021-21678
A vulnerability in the TFTP client of Zyxel GS1900 series firmware, XGS1210 series firmware, and XGS1250 series firmware, which could allow an authenticated LAN user to execute arbitrary OS commands via the GUI of the vulnerable device.
OS Command Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.8 MEDIUM
ADJACENT_NETWORK
LOW
HIGH
CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
ZyxelCNA
6.8 MEDIUM
ADJACENT_NETWORK
LOW
HIGH
CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 24%
Affected Products (NVD)
VendorProductVersion
zyxelgs1900-8_firmware
𝑥
< 2.70\(aahh.0\)-20211208
zyxelgs1900-8hp_firmware
𝑥
< 2.70\(aahi.0\)-20211208
zyxelgs1900-10hp_firmware
𝑥
< 2.70\(aazi.0\)-20211208
zyxelgs1900-16_firmware
𝑥
< 2.70\(aahj.0\)-20211208
zyxelgs1900-24e_firmware
𝑥
< 2.70\(aahk.0\)-20211208
zyxelgs1900-24ep_firmware
𝑥
< 2.70\(abto.0\)-20211208
zyxelgs1900-24_firmware
𝑥
< 2.70\(aahl.0\)-20211208
zyxelgs1900-24hp_firmware
𝑥
< 2.70\(aahm.0\)-20211208
zyxelgs1900-24hpv2_firmware
𝑥
< 2.70\(aatp.0\)-20211208
zyxelgs1900-48_firmware
𝑥
< 2.70\(aahn.0\)-20211208
zyxelgs1900-48hp_firmware
𝑥
< 2.70\(aaho.0\)-20211208
zyxelgs1900-48hpv2_firmware
𝑥
< 2.70\(abtq.0\)-20211208
zyxelxgs1210-12_firmware
𝑥
< 1.00\(abty.5\)c0
zyxelxgs1250-12_firmware
𝑥
< 1.00\(abwe.1\)c0
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://www.zyxel.com/support/Zyxel_security_advisory_for_OS_command_injection_vulnerabilities_of_switches.shtml
https://www.zyxel.com/support/Zyxel_security_advisory_for_OS_command_injection_vulnerabilities_of_switches.shtml