Zyxel Gs1900 10HP vulnerabilities

2 vulnerabilities

Known vulnerabilities in Zyxel Gs1900 10HP, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.5CVE-2024-38270zyxelgs1900-10hp_firmware+10
EPSS score
0.21%
An insufficient entropy vulnerability caused by the improper use of a randomness function with low entropy for web authentication tokens generation exists in the Zyxel GS1900-10HP firmware version V2.80(AAZI.0)C0. This vulnerability could allow a LAN-based attacker a slight chance to gain a valid session token if multiple authenticated sessions are alive.8.8CVE-2026-7273zyxelgs1900-10hp_firmware+19KEV
EPSS score
2.50%
A stack-based buffer overflow vulnerability in the CGI program of Zyxel GS1900-48HPv2 firmware versions through 2.90(ABTQ.1)C0 could allow a LAN-based, unauthenticated attacker to exploit the flaw and potentially execute OS commands via a crafted HTTP request.