CVSS 3.1
7.8 highCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HCVE-2021-35032
High (7.8) in zyxel. EPSS 0.2% chance of exploitation in the next 30 days.
A vulnerability in the 'libsal.so' of the Zyxel GS1900 series firmware version 2.60 could allow an authenticated local user to execute arbitrary OS commands via a crafted function call.
Severity
- EPSS
- 0.2% chance of exploitation in the next 30 days; higher than 12% of CVEs (scores of 2026-10-31)
- CWE
- CWE-78
- Published
- Modified
- Record from
- the NVD, synced
Affected
- zyxel:gs1900-10hp_firmware
- zyxel:gs1900-16_firmware
- zyxel:gs1900-24_firmware
- zyxel:gs1900-24e_firmware
- zyxel:gs1900-24ep_firmware
- zyxel:gs1900-24hp_firmware
- zyxel:gs1900-24hpv2_firmware
- zyxel:gs1900-48_firmware
- zyxel:gs1900-48hp_firmware
- zyxel:gs1900-48hpv2_firmware
- zyxel:gs1900-8_firmware
- zyxel:gs1900-8hp_firmware