CVSS 3.1
8.0 highCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HCVE-2021-35031
High (8.0) in zyxel. EPSS 0.5% chance of exploitation in the next 30 days.
A vulnerability in the TFTP client of Zyxel GS1900 series firmware, XGS1210 series firmware, and XGS1250 series firmware, which could allow an authenticated LAN user to execute arbitrary OS commands via the GUI of the vulnerable device.
Severity
- EPSS
- 0.5% chance of exploitation in the next 30 days; higher than 41% of CVEs (scores of 2026-10-31)
- CWE
- CWE-78
- Published
- Modified
- Record from
- the NVD, synced
Affected
- zyxel:gs1900-10hp_firmware
- zyxel:gs1900-16_firmware
- zyxel:gs1900-24_firmware
- zyxel:gs1900-24e_firmware
- zyxel:gs1900-24ep_firmware
- zyxel:gs1900-24hp_firmware
- zyxel:gs1900-24hpv2_firmware
- zyxel:gs1900-48_firmware
- zyxel:gs1900-48hp_firmware
- zyxel:gs1900-48hpv2_firmware
- zyxel:gs1900-8_firmware
- zyxel:gs1900-8hp_firmware
- zyxel:xgs1210-12_firmware
- zyxel:xgs1250-12_firmware