{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-08-02T05:10:37.821","vulnerabilities":[{"cve":{"id":"CVE-2023-35140","sourceIdentifier":"security@zyxel.com.tw","published":"2023-11-07T05:15:12.077","lastModified":"2026-06-17T06:04:28.457","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The improper privilege management vulnerability in the Zyxel GS1900-24EP switch firmware version V2.70(ABTO.5) could allow an authenticated local user with read-only access to modify system settings on a vulnerable device."},{"lang":"es","value":"La vulnerabilidad de administración de privilegios inadecuada en Zyxel GS1900-24EP switch firmware versión  V2.70 (ABTO.5) podría permitir que un usuario local autenticado con acceso de solo lectura modifique la configuración del sistema en un dispositivo vulnerable."}],"affected":[{"source":"security@zyxel.com.tw","affectedData":[{"vendor":"Zyxel","product":"GS1900-24EP firmware","defaultStatus":"unaffected","versions":[{"version":"V2.70(ABTO.5)","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"security@zyxel.com.tw","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-09-04T18:36:49.739422Z","id":"CVE-2023-35140","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"security@zyxel.com.tw","type":"Secondary","description":[{"lang":"en","value":"CWE-269"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:zyxel:gs1900-48hpv2_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"2.70\\(abtq.5\\)","matchCriteriaId":"AA14022B-4409-4725-BB26-2E85DC8BA02A"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:zyxel:gs1900-48hpv2:-:*:*:*:*:*:*:*","matchCriteriaId":"BC74C679-6D22-47E4-AE8A-2647B1AA4276"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:zyxel:gs1900-48_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"2.70\\(aahn.5\\)","matchCriteriaId":"1BB5CC06-9693-4951-BB8D-70CAF93C805E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:zyxel:gs1900-48:-:*:*:*:*:*:*:*","matchCriteriaId":"CFB7D4BF-7D17-48D3-990D-4BADAC8BD868"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:zyxel:gs1900-24hpv2_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"2.70\\(abtp.5\\)","matchCriteriaId":"6F9A3EA9-5893-46AC-AECB-DE0A30DD0498"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:zyxel:gs1900-24hpv2:-:*:*:*:*:*:*:*","matchCriteriaId":"512D9A91-8DA7-47F1-AC77-AF743F99BFF3"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:zyxel:gs1900-24ep_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"2.70\\(abto.5\\)","matchCriteriaId":"4C96ECDC-3D00-4AA9-8E72-78ABC672D637"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:zyxel:gs1900-24ep:-:*:*:*:*:*:*:*","matchCriteriaId":"B22AA8B1-11E2-408F-A1F6-0F8AF32AB131"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:zyxel:gs1900-24e_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"2.70\\(aahk.5\\)","matchCriteriaId":"E14B4311-5435-41DF-B0AC-32156D386D41"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:zyxel:gs1900-24e:-:*:*:*:*:*:*:*","matchCriteriaId":"A6456AD6-8A1D-4D3D-AC1A-ABE442242B1B"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:zyxel:gs1900-24_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"2.70\\(aahl.5\\)","matchCriteriaId":"EE64CC41-E4E4-4FED-88B9-FEC05FA7B0B6"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:zyxel:gs1900-24:-:*:*:*:*:*:*:*","matchCriteriaId":"F4F55299-70D5-4CE1-A1EC-D79B469B94F7"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:zyxel:gs1900-16_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"2.70\\(aahj.5\\)","matchCriteriaId":"8A68FFD4-FEFF-49F0-9091-9B2E5F0C707C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:zyxel:gs1900-16:-:*:*:*:*:*:*:*","matchCriteriaId":"5078F7A5-D03B-4D3A-9C19-57DFF4D6BF7A"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:zyxel:gs1900-10hp_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"2.70\\(aazi.5\\)","matchCriteriaId":"AC5EBAF1-3805-4332-9573-70E119244A71"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:zyxel:gs1900-10hp:-:*:*:*:*:*:*:*","matchCriteriaId":"89201505-07AF-4F9C-9304-46F2707DB9B4"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:zyxel:gs1900-8hp_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"2.70\\(aahi.5\\)","matchCriteriaId":"7C6E4B8A-4EC0-4BF6-81FE-40B5AA4B68A8"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:zyxel:gs1900-8hp:-:*:*:*:*:*:*:*","matchCriteriaId":"27602862-EFB7-402B-994E-254A0B210820"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:zyxel:gs1900-8_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"2.70\\(aahh.5\\)","matchCriteriaId":"13BF4CC3-F378-41D6-AAE1-4A5FA9C176C3"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:zyxel:gs1900-8:-:*:*:*:*:*:*:*","matchCriteriaId":"51D33F50-B5A4-4AEF-972C-7FF089C21D52"}]}]}],"references":[{"url":"https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-improper-privilege-management-vulnerability-in-gs1900-series-switches","source":"security@zyxel.com.tw","tags":["Not Applicable","Vendor Advisory"]},{"url":"https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-improper-privilege-management-vulnerability-in-gs1900-series-switches","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable","Vendor Advisory"]}]}}]}