CVE-2021-35030: XSS
A vulnerability was found in the CGI program in Zyxel GS1900-8 firmware version V2.60, that did not properly sterilize packet contents and could allow an authenticated, local user to perform a cross-site scripting (XSS) attack via a crafted LLDP packet.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2021-35030.
What is the severity level of CVE-2021-35030?
The severity level of CVE-2021-35030 is medium (4.3).
Which software is affected by CVE-2021-35030?
The Zyxel GS1900-8 firmware versions up to and excluding V2.70 are affected by CVE-2021-35030.
What is the impact of CVE-2021-35030?
CVE-2021-35030 could allow an authenticated, local user to perform a cross-site scripting (XSS) attack via a crafted LLDP packet.
Where can I find more information about CVE-2021-35030?
You can find more information about CVE-2021-35030 at the Zyxel security advisory page: https://www.zyxel.com/support/Zyxel_security_advisory_for_XSS_vulnerability_of_GS1900_series_switches.shtml