CVE-2021-35031

A vulnerability in the TFTP client of Zyxel GS1900 series firmware, XGS1210 series firmware, and XGS1250 series firmware, which could allow an authenticated LAN user to execute arbitrary OS commands via the GUI of the vulnerable device.
OS Command Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
6.8 MEDIUM
ADJACENT_NETWORK
LOW
HIGH
CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
ZyxelCNA
6.8 MEDIUM
ADJACENT_NETWORK
LOW
HIGH
CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 25%
VendorProductVersion
zyxelgs1900-8_firmware
𝑥
< 2.70\(aahh.0\)-20211208
zyxelgs1900-8hp_firmware
𝑥
< 2.70\(aahi.0\)-20211208
zyxelgs1900-10hp_firmware
𝑥
< 2.70\(aazi.0\)-20211208
zyxelgs1900-16_firmware
𝑥
< 2.70\(aahj.0\)-20211208
zyxelgs1900-24e_firmware
𝑥
< 2.70\(aahk.0\)-20211208
zyxelgs1900-24ep_firmware
𝑥
< 2.70\(abto.0\)-20211208
zyxelgs1900-24_firmware
𝑥
< 2.70\(aahl.0\)-20211208
zyxelgs1900-24hp_firmware
𝑥
< 2.70\(aahm.0\)-20211208
zyxelgs1900-24hpv2_firmware
𝑥
< 2.70\(aatp.0\)-20211208
zyxelgs1900-48_firmware
𝑥
< 2.70\(aahn.0\)-20211208
zyxelgs1900-48hp_firmware
𝑥
< 2.70\(aaho.0\)-20211208
zyxelgs1900-48hpv2_firmware
𝑥
< 2.70\(abtq.0\)-20211208
zyxelxgs1210-12_firmware
𝑥
< 1.00\(abty.5\)c0
zyxelxgs1250-12_firmware
𝑥
< 1.00\(abwe.1\)c0
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://www.zyxel.com/support/Zyxel_security_advisory_for_OS_command_injection_vulnerabilities_of_switches.shtml
https://www.zyxel.com/support/Zyxel_security_advisory_for_OS_command_injection_vulnerabilities_of_switches.shtml