← Database

CVE-2021-35030

LOW CVSS: 3.5 Published: 2021-07-26 Modified: 2026-06-17

Description

A vulnerability was found in the CGI program in Zyxel GS1900-8 firmware version V2.60, that did not properly sterilize packet contents and could allow an authenticated, local user to perform a cross-site scripting (XSS) attack via a crafted LLDP packet.

Affected Platforms

Zyxel Gs1900-24EpZyxel Gs1900-24E FirmwareZyxel Gs1900-24 FirmwareZyxel Gs1900-16Zyxel Gs1900-8Zyxel Gs1900-8Hp FirmwareZyxel Gs1900-10Hp FirmwareZyxel Gs1900-24HpZyxel Gs1900-8 FirmwareZyxel Gs1900-16 Firmware

Weakness Type

CWE-79, CWE-79

References