Medium · 5.5 CVE-2023-35140 EUVD-2023-39170GHSA-wcc8-wmx2-r8gp

The improper privilege management vulnerability in the Zyxel GS1900-24EP switch firmware version V2.70(ABTO.5) could allow an authenticated…

Published Nov 7, 2023 · Updated Sep 4, 2024 · Assigned by Zyxel

Vendor: Zyxel Product: GS1900-24EP firmware Category: Network devices

Description

The improper privilege management vulnerability in the Zyxel GS1900-24EP switch firmware version V2.70(ABTO.5) could allow an authenticated local user with read-only access to modify system settings on a vulnerable device.

Affected products

Vendor	Product	Affected	Fixed
Zyxel	GS1900-24EP firmware	V2.70(ABTO.5)	—

References

https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-improper-privilege-management-vulnerability-in-gs1900-series-switches vendor-advisory