CVE:CVE-2021-35032
CNNVD:CNNVD-202112-2727
Zyxel ZyXEL GS1900是中国台湾合勤（Zyxel）公司的一款管理型交换机。
Zyxel GS1900 中存在操作系统命令注入漏洞，该漏洞源于产品的libsal.so文件内的函数存在漏洞，攻击者可通过该漏洞调用函数执行任意系统命令。以下产品及版本受到影响：Zyxel GS1900 系列产品。
solution:Upgrade zyxel gs1900-8_firmware to a higher version than 2.70\(aahh.0\-20211208,and avoid the version (,2.70\(aahh.0\)-20211208); Upgrade zyxel gs1900-8hp_firmware to a higher version than 2.70\(aahi.0\-20211208,and avoid the version (,2.70\(aahi.0\)-20211208); Upgrade zyxel gs1900-10hp_firmware to a higher version than 2.70\(aazi.0\-20211208,and avoid the version (,2.70\(aazi.0\)-20211208); Upgrade zyxel gs1900-16_firmware to a higher version than 2.70\(aahj.0\-20211208,and avoid the version (,2.70\(aahj.0\)-20211208); Upgrade zyxel gs1900-24e_firmware to a higher version than 2.70\(aahk.0\-20211208,and avoid the version (,2.70\(aahk.0\)-20211208); Upgrade zyxel gs1900-24ep_firmware to a higher version than 2.70\(abto.0\-20211208,and avoid the version (,2.70\(abto.0\)-20211208); Upgrade zyxel gs1900-24_firmware to a higher version than 2.70\(aahl.0\-20211208,and avoid the version (,2.70\(aahl.0\)-20211208); Upgrade zyxel gs1900-24hp_firmware to a higher version than 2.70\(aahm.0\-20211208,and avoid the version (,2.70\(aahm.0\)-20211208); Upgrade zyxel gs1900-24hpv2_firmware to a higher version than 2.70\(aatp.0\-20211208,and avoid the version (,2.70\(aatp.0\)-20211208); Upgrade zyxel gs1900-48_firmware to a higher version than 2.70\(aahn.0\-20211208,and avoid the version (,2.70\(aahn.0\)-20211208); Upgrade zyxel gs1900-48hp_firmware to a higher version than 2.70\(aaho.0\-20211208,and avoid the version (,2.70\(aaho.0\)-20211208); Upgrade zyxel gs1900-48hpv2_firmware to a higher version than 2.70\(abtq.0\-20211208,and avoid the version (,2.70\(abtq.0\)-20211208)