CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2024-38270

An insufficient entropy vulnerability caused by the improper use of a randomness function with low entropy for web authentication tokens generation exists in the Zyxel GS1900-10HP firmware version V2.80(AAZI.0)C0. This vulnerability could allow a LAN-based attacker a slight chance to gain a valid session token if multiple authenticated sessions are alive.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.0

EPSS Ranking 11.9%

CVSS Severity

CVSS v3 Score 5.3

References

https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-insufficient-entropy-vulnerability-for-web-authentication-tokens-generation-in-gs1900-series-switches-09-10-2024

Products affected by CVE-2024-38270

Zyxel » Gs1900-10hp » Version: N/A

cpe:2.3:h:zyxel:gs1900-10hp:-
Zyxel » Gs1900-16 » Version: N/A

cpe:2.3:h:zyxel:gs1900-16:-
Zyxel » Gs1900-24 » Version: N/A

cpe:2.3:h:zyxel:gs1900-24:-
Zyxel » Gs1900-24e » Version: N/A

cpe:2.3:h:zyxel:gs1900-24e:-
Zyxel » Gs1900-24ep » Version: N/A

cpe:2.3:h:zyxel:gs1900-24ep:-
Zyxel » Gs1900-24hpv2 » Version: N/A

cpe:2.3:h:zyxel:gs1900-24hpv2:-
Zyxel » Gs1900-48 » Version: N/A

cpe:2.3:h:zyxel:gs1900-48:-
Zyxel » Gs1900-48hpv2 » Version: N/A

cpe:2.3:h:zyxel:gs1900-48hpv2:-
Zyxel » Gs1900-8 » Version: N/A

cpe:2.3:h:zyxel:gs1900-8:-
Zyxel » Gs1900-8hp » Version: N/A

cpe:2.3:h:zyxel:gs1900-8hp:-
Zyxel » Gs1900-10hp Firmware » Version: N/A

cpe:2.3:o:zyxel:gs1900-10hp_firmware:-
Zyxel » Gs1900-10hp Firmware » Version: 2.40

cpe:2.3:o:zyxel:gs1900-10hp_firmware:2.40
Zyxel » Gs1900-10hp Firmware » Version: 2.50(aazi.0)c0

cpe:2.3:o:zyxel:gs1900-10hp_firmware:2.50(aazi.0)c0
Zyxel » Gs1900-10hp Firmware » Version: 2.70

cpe:2.3:o:zyxel:gs1900-10hp_firmware:2.70
Zyxel » Gs1900-10hp Firmware » Version: 2.70(aazi.0)-20211208

cpe:2.3:o:zyxel:gs1900-10hp_firmware:2.70(aazi.0)-20211208
Zyxel » Gs1900-10hp Firmware » Version: 2.70(aazi.3)

cpe:2.3:o:zyxel:gs1900-10hp_firmware:2.70(aazi.3)
Zyxel » Gs1900-10hp Firmware » Version: 2.70(aazi.3)c0

cpe:2.3:o:zyxel:gs1900-10hp_firmware:2.70(aazi.3)c0
Zyxel » Gs1900-10hp Firmware » Version: 2.70(aazi.5)

cpe:2.3:o:zyxel:gs1900-10hp_firmware:2.70(aazi.5)
Zyxel » Gs1900-10hp Firmware » Version: 2.80(aazi.0)

cpe:2.3:o:zyxel:gs1900-10hp_firmware:2.80(aazi.0)
Zyxel » Gs1900-10hp Firmware » Version: 2.80(aazi.0)c0

cpe:2.3:o:zyxel:gs1900-10hp_firmware:2.80(aazi.0)c0
Zyxel » Gs1900-16 Firmware » Version: N/A

cpe:2.3:o:zyxel:gs1900-16_firmware:-
Zyxel » Gs1900-16 Firmware » Version: 2.40

cpe:2.3:o:zyxel:gs1900-16_firmware:2.40
Zyxel » Gs1900-16 Firmware » Version: 2.50(aahj.0)c0

cpe:2.3:o:zyxel:gs1900-16_firmware:2.50(aahj.0)c0
Zyxel » Gs1900-16 Firmware » Version: 2.70

cpe:2.3:o:zyxel:gs1900-16_firmware:2.70
Zyxel » Gs1900-16 Firmware » Version: 2.70(aahj.0)-20211208

cpe:2.3:o:zyxel:gs1900-16_firmware:2.70(aahj.0)-20211208
Zyxel » Gs1900-16 Firmware » Version: 2.70(aahj.3)

cpe:2.3:o:zyxel:gs1900-16_firmware:2.70(aahj.3)
Zyxel » Gs1900-16 Firmware » Version: 2.70(aahj.3)c0

cpe:2.3:o:zyxel:gs1900-16_firmware:2.70(aahj.3)c0
Zyxel » Gs1900-16 Firmware » Version: 2.70(aahj.5)

cpe:2.3:o:zyxel:gs1900-16_firmware:2.70(aahj.5)
Zyxel » Gs1900-16 Firmware » Version: 2.80(aahj.0)

cpe:2.3:o:zyxel:gs1900-16_firmware:2.80(aahj.0)
Zyxel » Gs1900-16 Firmware » Version: 2.80(aahj.0)c0

cpe:2.3:o:zyxel:gs1900-16_firmware:2.80(aahj.0)c0
Zyxel » Gs1900-24 Firmware » Version: N/A

cpe:2.3:o:zyxel:gs1900-24_firmware:-
Zyxel » Gs1900-24 Firmware » Version: 2.40

cpe:2.3:o:zyxel:gs1900-24_firmware:2.40
Zyxel » Gs1900-24 Firmware » Version: 2.50(aahl.0)c0

cpe:2.3:o:zyxel:gs1900-24_firmware:2.50(aahl.0)c0
Zyxel » Gs1900-24 Firmware » Version: 2.70

cpe:2.3:o:zyxel:gs1900-24_firmware:2.70
Zyxel » Gs1900-24 Firmware » Version: 2.70(aahl.0)-20211208

cpe:2.3:o:zyxel:gs1900-24_firmware:2.70(aahl.0)-20211208
Zyxel » Gs1900-24 Firmware » Version: 2.70(aahl.3)

cpe:2.3:o:zyxel:gs1900-24_firmware:2.70(aahl.3)
Zyxel » Gs1900-24 Firmware » Version: 2.70(aahl.3)c0

cpe:2.3:o:zyxel:gs1900-24_firmware:2.70(aahl.3)c0
Zyxel » Gs1900-24 Firmware » Version: 2.70(aahl.5)

cpe:2.3:o:zyxel:gs1900-24_firmware:2.70(aahl.5)
Zyxel » Gs1900-24 Firmware » Version: 2.80(aahl.0)

cpe:2.3:o:zyxel:gs1900-24_firmware:2.80(aahl.0)
Zyxel » Gs1900-24 Firmware » Version: 2.80(aahl.0)c0

cpe:2.3:o:zyxel:gs1900-24_firmware:2.80(aahl.0)c0
Zyxel » Gs1900-24 Firmware » Version: 2.80(aahl.1)c0

cpe:2.3:o:zyxel:gs1900-24_firmware:2.80(aahl.1)c0
Zyxel » Gs1900-24e Firmware » Version: N/A

cpe:2.3:o:zyxel:gs1900-24e_firmware:-
Zyxel » Gs1900-24e Firmware » Version: 2.40

cpe:2.3:o:zyxel:gs1900-24e_firmware:2.40
Zyxel » Gs1900-24e Firmware » Version: 2.50(aahk.0)c0

cpe:2.3:o:zyxel:gs1900-24e_firmware:2.50(aahk.0)c0
Zyxel » Gs1900-24e Firmware » Version: 2.70

cpe:2.3:o:zyxel:gs1900-24e_firmware:2.70
Zyxel » Gs1900-24e Firmware » Version: 2.70(aahk.0)-20211208

cpe:2.3:o:zyxel:gs1900-24e_firmware:2.70(aahk.0)-20211208
Zyxel » Gs1900-24e Firmware » Version: 2.70(aahk.3)

cpe:2.3:o:zyxel:gs1900-24e_firmware:2.70(aahk.3)
Zyxel » Gs1900-24e Firmware » Version: 2.70(aahk.3)c0

cpe:2.3:o:zyxel:gs1900-24e_firmware:2.70(aahk.3)c0
Zyxel » Gs1900-24e Firmware » Version: 2.70(aahk.5)

cpe:2.3:o:zyxel:gs1900-24e_firmware:2.70(aahk.5)
Zyxel » Gs1900-24e Firmware » Version: 2.80(aahk.0)

cpe:2.3:o:zyxel:gs1900-24e_firmware:2.80(aahk.0)
Zyxel » Gs1900-24e Firmware » Version: 2.80(aahk.0)c0

cpe:2.3:o:zyxel:gs1900-24e_firmware:2.80(aahk.0)c0
Zyxel » Gs1900-24e Firmware » Version: 2.80(aahk.1)c0

cpe:2.3:o:zyxel:gs1900-24e_firmware:2.80(aahk.1)c0
Zyxel » Gs1900-24ep Firmware » Version: 2.70

cpe:2.3:o:zyxel:gs1900-24ep_firmware:2.70
Zyxel » Gs1900-24ep Firmware » Version: 2.70(abto.0)-20211208

cpe:2.3:o:zyxel:gs1900-24ep_firmware:2.70(abto.0)-20211208
Zyxel » Gs1900-24ep Firmware » Version: 2.70(abto.3)

cpe:2.3:o:zyxel:gs1900-24ep_firmware:2.70(abto.3)
Zyxel » Gs1900-24ep Firmware » Version: 2.70(abto.3)c0

cpe:2.3:o:zyxel:gs1900-24ep_firmware:2.70(abto.3)c0
Zyxel » Gs1900-24ep Firmware » Version: 2.70(abto.5)

cpe:2.3:o:zyxel:gs1900-24ep_firmware:2.70(abto.5)
Zyxel » Gs1900-24ep Firmware » Version: 2.80(abto.0)

cpe:2.3:o:zyxel:gs1900-24ep_firmware:2.80(abto.0)
Zyxel » Gs1900-24ep Firmware » Version: 2.80(abto.0)c0

cpe:2.3:o:zyxel:gs1900-24ep_firmware:2.80(abto.0)c0
Zyxel » Gs1900-24hpv2 Firmware » Version: 2.70

cpe:2.3:o:zyxel:gs1900-24hpv2_firmware:2.70
Zyxel » Gs1900-24hpv2 Firmware » Version: 2.70(aatp.0)-20211208

cpe:2.3:o:zyxel:gs1900-24hpv2_firmware:2.70(aatp.0)-20211208
Zyxel » Gs1900-24hpv2 Firmware » Version: 2.70(abtp.3)

cpe:2.3:o:zyxel:gs1900-24hpv2_firmware:2.70(abtp.3)
Zyxel » Gs1900-24hpv2 Firmware » Version: 2.70(abtp.3)c0

cpe:2.3:o:zyxel:gs1900-24hpv2_firmware:2.70(abtp.3)c0
Zyxel » Gs1900-24hpv2 Firmware » Version: 2.70(abtp.5)

cpe:2.3:o:zyxel:gs1900-24hpv2_firmware:2.70(abtp.5)
Zyxel » Gs1900-24hpv2 Firmware » Version: 2.80(abtp.0)

cpe:2.3:o:zyxel:gs1900-24hpv2_firmware:2.80(abtp.0)
Zyxel » Gs1900-24hpv2 Firmware » Version: 2.80(abtp.0)c0

cpe:2.3:o:zyxel:gs1900-24hpv2_firmware:2.80(abtp.0)c0
Zyxel » Gs1900-48 Firmware » Version: N/A

cpe:2.3:o:zyxel:gs1900-48_firmware:-
Zyxel » Gs1900-48 Firmware » Version: 2.40

cpe:2.3:o:zyxel:gs1900-48_firmware:2.40
Zyxel » Gs1900-48 Firmware » Version: 2.50(aahn.0)c0

cpe:2.3:o:zyxel:gs1900-48_firmware:2.50(aahn.0)c0
Zyxel » Gs1900-48 Firmware » Version: 2.70

cpe:2.3:o:zyxel:gs1900-48_firmware:2.70
Zyxel » Gs1900-48 Firmware » Version: 2.70(aahn.0)-20211208

cpe:2.3:o:zyxel:gs1900-48_firmware:2.70(aahn.0)-20211208
Zyxel » Gs1900-48 Firmware » Version: 2.70(aahn.3)

cpe:2.3:o:zyxel:gs1900-48_firmware:2.70(aahn.3)
Zyxel » Gs1900-48 Firmware » Version: 2.70(aahn.3)c0

cpe:2.3:o:zyxel:gs1900-48_firmware:2.70(aahn.3)c0
Zyxel » Gs1900-48 Firmware » Version: 2.70(aahn.5)

cpe:2.3:o:zyxel:gs1900-48_firmware:2.70(aahn.5)
Zyxel » Gs1900-48 Firmware » Version: 2.80(aahn.0)

cpe:2.3:o:zyxel:gs1900-48_firmware:2.80(aahn.0)
Zyxel » Gs1900-48 Firmware » Version: 2.80(aahn.0)c0

cpe:2.3:o:zyxel:gs1900-48_firmware:2.80(aahn.0)c0
Zyxel » Gs1900-48hpv2 Firmware » Version: 2.70

cpe:2.3:o:zyxel:gs1900-48hpv2_firmware:2.70
Zyxel » Gs1900-48hpv2 Firmware » Version: 2.70(abtq.0)-20211208

cpe:2.3:o:zyxel:gs1900-48hpv2_firmware:2.70(abtq.0)-20211208
Zyxel » Gs1900-48hpv2 Firmware » Version: 2.70(abtq.3)

cpe:2.3:o:zyxel:gs1900-48hpv2_firmware:2.70(abtq.3)
Zyxel » Gs1900-48hpv2 Firmware » Version: 2.70(abtq.3)c0

cpe:2.3:o:zyxel:gs1900-48hpv2_firmware:2.70(abtq.3)c0
Zyxel » Gs1900-48hpv2 Firmware » Version: 2.70(abtq.5)

cpe:2.3:o:zyxel:gs1900-48hpv2_firmware:2.70(abtq.5)
Zyxel » Gs1900-48hpv2 Firmware » Version: 2.80(abtq.0)

cpe:2.3:o:zyxel:gs1900-48hpv2_firmware:2.80(abtq.0)
Zyxel » Gs1900-48hpv2 Firmware » Version: 2.80(abtq.0)c0

cpe:2.3:o:zyxel:gs1900-48hpv2_firmware:2.80(abtq.0)c0
Zyxel » Gs1900-8 Firmware » Version: N/A

cpe:2.3:o:zyxel:gs1900-8_firmware:-
Zyxel » Gs1900-8 Firmware » Version: 2.40

cpe:2.3:o:zyxel:gs1900-8_firmware:2.40
Zyxel » Gs1900-8 Firmware » Version: 2.50(aaho.0)c0

cpe:2.3:o:zyxel:gs1900-8_firmware:2.50(aaho.0)c0
Zyxel » Gs1900-8 Firmware » Version: 2.70

cpe:2.3:o:zyxel:gs1900-8_firmware:2.70
Zyxel » Gs1900-8 Firmware » Version: 2.70(aahh.0)-20211208

cpe:2.3:o:zyxel:gs1900-8_firmware:2.70(aahh.0)-20211208
Zyxel » Gs1900-8 Firmware » Version: 2.70(aahh.3)

cpe:2.3:o:zyxel:gs1900-8_firmware:2.70(aahh.3)
Zyxel » Gs1900-8 Firmware » Version: 2.70(aahh.3)c0

cpe:2.3:o:zyxel:gs1900-8_firmware:2.70(aahh.3)c0
Zyxel » Gs1900-8 Firmware » Version: 2.70(aahh.5)

cpe:2.3:o:zyxel:gs1900-8_firmware:2.70(aahh.5)
Zyxel » Gs1900-8 Firmware » Version: 2.80(aahh.0)

cpe:2.3:o:zyxel:gs1900-8_firmware:2.80(aahh.0)
Zyxel » Gs1900-8 Firmware » Version: 2.80(aahh.0)c0

cpe:2.3:o:zyxel:gs1900-8_firmware:2.80(aahh.0)c0
Zyxel » Gs1900-8hp Firmware » Version: N/A

cpe:2.3:o:zyxel:gs1900-8hp_firmware:-
Zyxel » Gs1900-8hp Firmware » Version: 2.40

cpe:2.3:o:zyxel:gs1900-8hp_firmware:2.40
Zyxel » Gs1900-8hp Firmware » Version: 2.50(aahi.0)c0

cpe:2.3:o:zyxel:gs1900-8hp_firmware:2.50(aahi.0)c0
Zyxel » Gs1900-8hp Firmware » Version: 2.70

cpe:2.3:o:zyxel:gs1900-8hp_firmware:2.70
Zyxel » Gs1900-8hp Firmware » Version: 2.70(aahi.0)-20211208

cpe:2.3:o:zyxel:gs1900-8hp_firmware:2.70(aahi.0)-20211208
Zyxel » Gs1900-8hp Firmware » Version: 2.70(aahi.3)

cpe:2.3:o:zyxel:gs1900-8hp_firmware:2.70(aahi.3)
Zyxel » Gs1900-8hp Firmware » Version: 2.70(aahi.3)c0

cpe:2.3:o:zyxel:gs1900-8hp_firmware:2.70(aahi.3)c0
Zyxel » Gs1900-8hp Firmware » Version: 2.70(aahi.5)

cpe:2.3:o:zyxel:gs1900-8hp_firmware:2.70(aahi.5)
Zyxel » Gs1900-8hp Firmware » Version: 2.80(aahi.0)

cpe:2.3:o:zyxel:gs1900-8hp_firmware:2.80(aahi.0)
Zyxel » Gs1900-8hp Firmware » Version: 2.80(aahi.0)c0

cpe:2.3:o:zyxel:gs1900-8hp_firmware:2.80(aahi.0)c0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2024-38270

Products

Pricing

Contact Us