CVE-2023-35140

State: Published
Severity: 5.5 Medium
Published: Nov 7, 2023
Updated: Sep 4, 2024
Reserved: Jun 14, 2023

Description

The improper privilege management vulnerability in the Zyxel GS1900-24EP switch firmware version V2.70(ABTO.5) could allow an authenticated local user with read-only access to modify system settings on a vulnerable device.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N	Zyxel

Weaknesses

CWE-269 Improper Privilege Management

Affected Products

Product	Versions
GS1900-24EP firmwareZyxel	V2.70(ABTO.5)Affected

References

https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-improper-privilege-management-vulnerability-in-gs1900-series-switchesvendor-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.