[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fxn0RwDE4XJI9v91cLkS3iXHZ-MIsQM_TXth2UyJ6laU":3,"g5a-risk:CVE-2024-38270":269},{"success":4,"data":5,"meta":266},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":40,"epssPercentile":28,"epssTimeSeries":41,"severity":42,"affectedProducts":43,"affectedProductsCount":108,"references":109,"referencesCount":115,"weaknesses":116,"weaknessesCount":115,"isActivelyExploited":53,"cisaInfo":28,"otxData":28,"relatedBlogPosts":125,"seoMetadata":126,"configurations":151,"relatedVendorCves":264,"notableEvents":265},"CVE-2024-38270","What is CVE-2024-38270?","An insufficient entropy vulnerability caused by the improper use of a randomness function with low entropy for web authentication tokens generation exists in the Zyxel GS1900-10HP firmware version V2.80(AAZI.0)C0. This vulnerability could allow a LAN-based attacker a slight chance to gain a valid session token if multiple authenticated sessions are alive.","An insufficient entropy vulnerability caused by the improper use of a randomness function with low entropy for web authentication tokens generation exists in...","2024-09-10T02:15:09.78","2026-06-17T07:39:50.087",6.5,"CVSS:3.1\u002FAV:A\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":37,"CVSSMetricV2":38,"CVSSMetricV40":39},[16,31],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":29,"ImpactScore":30},"security@zyxel.com.tw","Secondary",{"Version":20,"VectorString":21,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":23,"IntegrityImpact":24,"AvailabilityImpact":24,"BaseScore":26,"BaseSeverity":27,"ExploitCodeMaturity":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"TemporalSeverity":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":28,"ModifiedAttackVector":28,"ModifiedAttackComplexity":28,"ModifiedPrivilegesRequired":28,"ModifiedUserInteraction":28,"ModifiedScope":28,"ModifiedConfidentialityImpact":28,"ModifiedIntegrityImpact":28,"ModifiedAvailabilityImpact":28,"EnvironmentalScore":28,"EnvironmentalSeverity":28},"3.1","CVSS:3.1\u002FAV:A\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N","ADJACENT_NETWORK","HIGH","NONE","UNCHANGED",5.3,"MEDIUM",null,1.6,3.6,{"Source":32,"Type":33,"CVSSData":34,"ExploitabilityScore":36,"ImpactScore":30},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":22,"AttackComplexity":35,"PrivilegesRequired":24,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":23,"IntegrityImpact":24,"AvailabilityImpact":24,"BaseScore":12,"BaseSeverity":27,"ExploitCodeMaturity":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"TemporalSeverity":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":28,"ModifiedAttackVector":28,"ModifiedAttackComplexity":28,"ModifiedPrivilegesRequired":28,"ModifiedUserInteraction":28,"ModifiedScope":28,"ModifiedConfidentialityImpact":28,"ModifiedIntegrityImpact":28,"ModifiedAvailabilityImpact":28,"EnvironmentalScore":28,"EnvironmentalSeverity":28},"LOW",2.8,[],[],[],0.00212,[40,40,40,40,40,40,40],"Medium",[44,49,54,57,60,63,66,69,72,75,78,81,84,87,90,93,96,99,102,105],{"vendor":45,"product":46,"version":47,"criteria":48,"vulnerable":4},"zyxel","gs1900-48hpv2_firmware","*","cpe:2.3:o:zyxel:gs1900-48hpv2_firmware:*:*:*:*:*:*:*:*",{"vendor":45,"product":50,"version":51,"criteria":52,"vulnerable":53},"gs1900-48hpv2","-","cpe:2.3:h:zyxel:gs1900-48hpv2:-:*:*:*:*:*:*:*",false,{"vendor":45,"product":55,"version":47,"criteria":56,"vulnerable":4},"gs1900-48_firmware","cpe:2.3:o:zyxel:gs1900-48_firmware:*:*:*:*:*:*:*:*",{"vendor":45,"product":58,"version":51,"criteria":59,"vulnerable":53},"gs1900-48","cpe:2.3:h:zyxel:gs1900-48:-:*:*:*:*:*:*:*",{"vendor":45,"product":61,"version":47,"criteria":62,"vulnerable":4},"gs1900-24hpv2_firmware","cpe:2.3:o:zyxel:gs1900-24hpv2_firmware:*:*:*:*:*:*:*:*",{"vendor":45,"product":64,"version":51,"criteria":65,"vulnerable":53},"gs1900-24hpv2","cpe:2.3:h:zyxel:gs1900-24hpv2:-:*:*:*:*:*:*:*",{"vendor":45,"product":67,"version":47,"criteria":68,"vulnerable":4},"gs1900-24ep_firmware","cpe:2.3:o:zyxel:gs1900-24ep_firmware:*:*:*:*:*:*:*:*",{"vendor":45,"product":70,"version":51,"criteria":71,"vulnerable":53},"gs1900-24ep","cpe:2.3:h:zyxel:gs1900-24ep:-:*:*:*:*:*:*:*",{"vendor":45,"product":73,"version":47,"criteria":74,"vulnerable":4},"gs1900-24e_firmware","cpe:2.3:o:zyxel:gs1900-24e_firmware:*:*:*:*:*:*:*:*",{"vendor":45,"product":76,"version":51,"criteria":77,"vulnerable":53},"gs1900-24e","cpe:2.3:h:zyxel:gs1900-24e:-:*:*:*:*:*:*:*",{"vendor":45,"product":79,"version":47,"criteria":80,"vulnerable":4},"gs1900-24_firmware","cpe:2.3:o:zyxel:gs1900-24_firmware:*:*:*:*:*:*:*:*",{"vendor":45,"product":82,"version":51,"criteria":83,"vulnerable":53},"gs1900-24","cpe:2.3:h:zyxel:gs1900-24:-:*:*:*:*:*:*:*",{"vendor":45,"product":85,"version":47,"criteria":86,"vulnerable":4},"gs1900-16_firmware","cpe:2.3:o:zyxel:gs1900-16_firmware:*:*:*:*:*:*:*:*",{"vendor":45,"product":88,"version":51,"criteria":89,"vulnerable":53},"gs1900-16","cpe:2.3:h:zyxel:gs1900-16:-:*:*:*:*:*:*:*",{"vendor":45,"product":91,"version":47,"criteria":92,"vulnerable":4},"gs1900-10hp_firmware","cpe:2.3:o:zyxel:gs1900-10hp_firmware:*:*:*:*:*:*:*:*",{"vendor":45,"product":94,"version":51,"criteria":95,"vulnerable":53},"gs1900-10hp","cpe:2.3:h:zyxel:gs1900-10hp:-:*:*:*:*:*:*:*",{"vendor":45,"product":97,"version":47,"criteria":98,"vulnerable":4},"gs1900-8hp_firmware","cpe:2.3:o:zyxel:gs1900-8hp_firmware:*:*:*:*:*:*:*:*",{"vendor":45,"product":100,"version":51,"criteria":101,"vulnerable":53},"gs1900-8hp","cpe:2.3:h:zyxel:gs1900-8hp:-:*:*:*:*:*:*:*",{"vendor":45,"product":103,"version":47,"criteria":104,"vulnerable":4},"gs1900-8_firmware","cpe:2.3:o:zyxel:gs1900-8_firmware:*:*:*:*:*:*:*:*",{"vendor":45,"product":106,"version":51,"criteria":107,"vulnerable":53},"gs1900-8","cpe:2.3:h:zyxel:gs1900-8:-:*:*:*:*:*:*:*",20,[110],{"url":111,"source":112,"tags":113},"https:\u002F\u002Fwww.zyxel.com\u002Fglobal\u002Fen\u002Fsupport\u002Fsecurity-advisories\u002Fzyxel-security-advisory-for-insufficient-entropy-vulnerability-for-web-authentication-tokens-generation-in-gs1900-series-switches-09-10-2024","Zyxel",[114],"Vendor Advisory",1,[117],{"id":118,"name":119,"description":120,"extendedDescription":121,"status":122,"abstraction":123,"structure":124},"CWE-331","Insufficient Entropy","The product uses an algorithm or scheme that produces insufficient entropy, leaving patterns or clusters of values that are more likely to occur than others.","","Draft","Base","Simple",[],{"title":127,"metaDescription":128,"keywords":129,"canonicalUrl":130,"structuredData":131},"What is CVE-2024-38270? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2024-38270, a medium severity cyber security vulnerability from 2024. An insufficient entropy vulnerability caused by the impro...","CVE-2024-38270, CVE-2024-38270 vulnerability, CVE-2024-38270 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2024, CVSS score, exploit, patch, remediation, zyxel security, gs1900-48hpv2_firmware vulnerability, gs1900-48hpv2 vulnerability, gs1900-48_firmware vulnerability, gs1900-48 vulnerability, gs1900-24hpv2_firmware vulnerability","\u002Fwhat-is\u002Fcve-2024-38270",{"@context":132,"@type":133,"headline":127,"description":128,"datePublished":10,"dateModified":11,"author":134,"publisher":138,"about":142,"mainEntityOfPage":146,"articleSection":149,"keywords":150},"https:\u002F\u002Fschema.org","TechArticle",{"@type":135,"name":136,"url":137},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":135,"name":136,"url":137,"logo":139},{"@type":140,"url":141},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":143,"name":6,"description":144,"additionalType":145},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":147,"@id":148},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2024-38270","Cybersecurity","CVE-2024-38270, CVE-2024-38270 vulnerability, CVE-2024-38270 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[152,165,176,187,198,209,220,231,242,253],{"Operator":153,"Negate":28,"Nodes":154},"AND",[155,161],{"Operator":156,"Negate":53,"CPEMatch":157},"OR",[158],{"Vulnerable":4,"Criteria":48,"MatchCriteriaID":159,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":160,"VersionEndIncluding":28},"ACACFF77-1C3D-4DBA-A179-500B5602ED46","2.80\\(abtq.1\\)c0",{"Operator":156,"Negate":53,"CPEMatch":162},[163],{"Vulnerable":53,"Criteria":52,"MatchCriteriaID":164,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"BC74C679-6D22-47E4-AE8A-2647B1AA4276",{"Operator":153,"Negate":28,"Nodes":166},[167,172],{"Operator":156,"Negate":53,"CPEMatch":168},[169],{"Vulnerable":4,"Criteria":56,"MatchCriteriaID":170,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":171,"VersionEndIncluding":28},"7F2E6F4E-9DA0-4AFB-B4A3-7C3E611DA2FA","2.80\\(aahn.1\\)c0",{"Operator":156,"Negate":53,"CPEMatch":173},[174],{"Vulnerable":53,"Criteria":59,"MatchCriteriaID":175,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"CFB7D4BF-7D17-48D3-990D-4BADAC8BD868",{"Operator":153,"Negate":28,"Nodes":177},[178,183],{"Operator":156,"Negate":53,"CPEMatch":179},[180],{"Vulnerable":4,"Criteria":62,"MatchCriteriaID":181,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":182,"VersionEndIncluding":28},"B3539C1D-6C16-4DFB-A601-F5346071F4D7","2.80\\(abtp.1\\)c0",{"Operator":156,"Negate":53,"CPEMatch":184},[185],{"Vulnerable":53,"Criteria":65,"MatchCriteriaID":186,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"512D9A91-8DA7-47F1-AC77-AF743F99BFF3",{"Operator":153,"Negate":28,"Nodes":188},[189,194],{"Operator":156,"Negate":53,"CPEMatch":190},[191],{"Vulnerable":4,"Criteria":68,"MatchCriteriaID":192,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":193,"VersionEndIncluding":28},"FF16626B-7BBE-4BFF-A60E-02B0B1243217","2.80\\(abto.1\\)c0",{"Operator":156,"Negate":53,"CPEMatch":195},[196],{"Vulnerable":53,"Criteria":71,"MatchCriteriaID":197,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"B22AA8B1-11E2-408F-A1F6-0F8AF32AB131",{"Operator":153,"Negate":28,"Nodes":199},[200,205],{"Operator":156,"Negate":53,"CPEMatch":201},[202],{"Vulnerable":4,"Criteria":74,"MatchCriteriaID":203,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":204},"F8AE67A4-4CCE-4E95-840D-CB6F4F6FB00F","2.80\\(aahk.1\\)c0",{"Operator":156,"Negate":53,"CPEMatch":206},[207],{"Vulnerable":53,"Criteria":77,"MatchCriteriaID":208,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"A6456AD6-8A1D-4D3D-AC1A-ABE442242B1B",{"Operator":153,"Negate":28,"Nodes":210},[211,216],{"Operator":156,"Negate":53,"CPEMatch":212},[213],{"Vulnerable":4,"Criteria":80,"MatchCriteriaID":214,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":215},"441A359C-A00E-4B96-A321-F769259871B7","2.80\\(aahl.1\\)c0",{"Operator":156,"Negate":53,"CPEMatch":217},[218],{"Vulnerable":53,"Criteria":83,"MatchCriteriaID":219,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"F4F55299-70D5-4CE1-A1EC-D79B469B94F7",{"Operator":153,"Negate":28,"Nodes":221},[222,227],{"Operator":156,"Negate":53,"CPEMatch":223},[224],{"Vulnerable":4,"Criteria":86,"MatchCriteriaID":225,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":226,"VersionEndIncluding":28},"A657FCE5-BA80-4E22-934A-3B632A9200D7","2.80\\(aahj.1\\)c0",{"Operator":156,"Negate":53,"CPEMatch":228},[229],{"Vulnerable":53,"Criteria":89,"MatchCriteriaID":230,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"5078F7A5-D03B-4D3A-9C19-57DFF4D6BF7A",{"Operator":153,"Negate":28,"Nodes":232},[233,238],{"Operator":156,"Negate":53,"CPEMatch":234},[235],{"Vulnerable":4,"Criteria":92,"MatchCriteriaID":236,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":237,"VersionEndIncluding":28},"4503BD65-51A5-4626-9076-021E6F7DF0B8","2.80\\(aazi.1\\)c0",{"Operator":156,"Negate":53,"CPEMatch":239},[240],{"Vulnerable":53,"Criteria":95,"MatchCriteriaID":241,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"89201505-07AF-4F9C-9304-46F2707DB9B4",{"Operator":153,"Negate":28,"Nodes":243},[244,249],{"Operator":156,"Negate":53,"CPEMatch":245},[246],{"Vulnerable":4,"Criteria":98,"MatchCriteriaID":247,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":248,"VersionEndIncluding":28},"96F5E646-4DFD-4476-9D8B-9A8919C1F261","2.80\\(aahi.1\\)c0",{"Operator":156,"Negate":53,"CPEMatch":250},[251],{"Vulnerable":53,"Criteria":101,"MatchCriteriaID":252,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"27602862-EFB7-402B-994E-254A0B210820",{"Operator":153,"Negate":28,"Nodes":254},[255,260],{"Operator":156,"Negate":53,"CPEMatch":256},[257],{"Vulnerable":4,"Criteria":104,"MatchCriteriaID":258,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":259,"VersionEndIncluding":28},"87482A53-9933-4A0B-9831-F16AF9CBFB46","2.80\\(aahh.1\\)c0",{"Operator":156,"Negate":53,"CPEMatch":261},[262],{"Vulnerable":53,"Criteria":107,"MatchCriteriaID":263,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"51D33F50-B5A4-4AEF-972C-7FF089C21D52",[],[],{"lastModified":11,"cacheTime":267,"version":268},1792371386284,"2.0",{"score":270,"band":271,"action":272,"scoredAt":273},21,"Low","Monitor","2026-10-16T07:03:46.102924+00:00"]