← Database

CVE-2024-8881

MEDIUM CVSS: 6.8 Published: 2024-11-12 Modified: 2026-06-17

Description

A post-authentication command injection vulnerability in the CGI program in the Zyxel GS1900-48 switch firmware version V2.80(AAHN.1)C0 and earlier could allow an authenticated, LAN-based attacker with administrator privileges to execute some operating system (OS) commands on an affected device by sending a crafted HTTP request.

Affected Platforms

Zyxel Gs1900-24EpZyxel Gs1900-24E FirmwareZyxel Gs1900-24 FirmwareZyxel Gs1900-16Zyxel Gs1900-8Zyxel Gs1900-8Hp FirmwareZyxel Gs1900-10Hp FirmwareZyxel Gs1900-8 FirmwareZyxel Gs1900-16 FirmwareZyxel Gs1900-10Hp

Weakness Type

CWE-78, CWE-78

References