Medium · 6.4 CVE-2021-35032 EUVD-2021-21679GHSA-r9f4-jwv9-qjg8

A vulnerability in the 'libsal.so' of the Zyxel GS1900 series firmware version 2.60 could allow an authenticated local user to execute arbi…

Published Dec 28, 2021 · Updated Aug 4, 2024 · Assigned by Zyxel

Vendor: Zyxel Product: GS1900 series firmware Category: Network devices

Description

A vulnerability in the 'libsal.so' of the Zyxel GS1900 series firmware version 2.60 could allow an authenticated local user to execute arbitrary OS commands via a crafted function call.

Affected products

Vendor	Product	Affected	Fixed
Zyxel	GS1900 series firmware	2.60	—

References

https://www.zyxel.com/support/Zyxel_security_advisory_for_OS_command_injection_vulnerabilities_of_switches.shtml