CVSS 3.1
4.3 mediumCVSS:3.1/AV:A/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:NCVE-2021-35030
Medium (4.3) in zyxel. EPSS 0.3% chance of exploitation in the next 30 days.
A vulnerability was found in the CGI program in Zyxel GS1900-8 firmware version V2.60, that did not properly sterilize packet contents and could allow an authenticated, local user to perform a cross-site scripting (XSS) attack via a crafted LLDP packet.
Severity
- EPSS
- 0.3% chance of exploitation in the next 30 days; higher than 18% of CVEs (scores of 2026-10-31)
- CWE
- CWE-79
- Published
- Modified
- Record from
- the NVD, synced
Affected
- zyxel:gs1900-10hp_firmware
- zyxel:gs1900-16_firmware
- zyxel:gs1900-24_firmware
- zyxel:gs1900-24e_firmware
- zyxel:gs1900-24ep_firmware
- zyxel:gs1900-24hp_firmware
- zyxel:gs1900-24hpv2_firmware
- zyxel:gs1900-48_firmware
- zyxel:gs1900-48hp_firmware
- zyxel:gs1900-48hpv2_firmware
- zyxel:gs1900-8_firmware
- zyxel:gs1900-8hp_firmware