vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2024-8881

MEDIUM
6.8
CVSS Score
Published: November 12, 2024 at 01:17 AM UTC
Updated: June 17, 2026 at 08:23 AM UTC
20 products affected across 1 vendorGS1900-10HP firmwareGS1900-24 firmwareGS1900-8 Firmware

Using GS1900-48 firmware by Zyxel?

Get instant alerts when new vulnerabilities affect GS1900-48 firmware - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
MEDIUM6.8
Exploit prediction
EPSS 0.7%
SSVC
No known exploit

Description

A post-authentication command injection vulnerability in the CGI program in the Zyxel GS1900-48 switch firmware version V2.80(AAHN.1)C0 and earlier could allow an authenticated, LAN-based attacker with administrator privileges to execute some operating system (OS) commands on an affected device by sending a crafted HTTP request.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

GS1900-10HP firmware· Zyxel
95%
v < 2.90(aazi.0)c0
Affected range stops below 2.90(aazi.0)c0, so it looks safe — our inference, not a vendor statement
zyxel-gs1900-10hp (same device)
GS1900-16 firmware· Zyxel
95%
v < 2.90(aahj.0)c0
Affected range stops below 2.90(aahj.0)c0, so it looks safe — our inference, not a vendor statement
zyxel-gs1900-16 (same device)
GS1900-24 firmware· Zyxel
95%
v < 2.90(aahl.0)c0
Affected range stops below 2.90(aahl.0)c0, so it looks safe — our inference, not a vendor statement
zyxel-gs1900-24 (same device)
GS1900-24E firmware· Zyxel
95%
v < 2.90(aahk.0)c0
Affected range stops below 2.90(aahk.0)c0, so it looks safe — our inference, not a vendor statement
zyxel-gs1900-24e (same device)
GS1900-24EP firmware· Zyxel
95%
v < 2.90(abto.0)c0
Affected range stops below 2.90(abto.0)c0, so it looks safe — our inference, not a vendor statement
zyxel-gs1900-24ep (same device)
GS1900-24HPv2 firmware· Zyxel
95%
v < 2.90(abtp.0)c0
Affected range stops below 2.90(abtp.0)c0, so it looks safe — our inference, not a vendor statement
zyxel-gs1900-24hpv2 (same device)
GS1900-48 firmware· Zyxel
95%
v ≤ 2.80(AAHN.1)C0v < 2.90(aahn.0)c0<= V2.80(AAHN.1)C0
Affected range stops below 2.90(aahn.0)c0, so it looks safe — our inference, not a vendor statement
zyxel-gs1900-48 (same device)
GS1900-48HPv2 firmware· Zyxel
95%
v < 2.90(abtq.0)c0
Affected range stops below 2.90(abtq.0)c0, so it looks safe — our inference, not a vendor statement
zyxel-gs1900-48hpv2 (same device)
GS1900-8 Firmware· Zyxel
95%
v < 2.90(aahh.0)c0
Affected range stops below 2.90(aahh.0)c0, so it looks safe — our inference, not a vendor statement
zyxel-gs1900-8 (same device)
GS1900-8HP firmware· Zyxel
95%
v < 2.90(aahi.0)c0
Affected range stops below 2.90(aahi.0)c0, so it looks safe — our inference, not a vendor statement
zyxel-gs1900-8hp (same device)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

References (1)

Vendor Advisory
Source: [email protected]
https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-post-authentication-command-injection-and-buffer-overflow-vulnerabilities-in-gs1900-series-switches-11-12-2024

SSVC — Action Prioritization

SSVCNo known exploitNot automatableTotal impact

SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.

CVSS

6.8MEDIUMZyxel
Attack Vector
ADJACENT_NETWORK
Complexity
LOW
Privileges
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH
Vector?

Quick Info

StatusANALYZED
CWE
CWE-78

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card