Product:

Gs1900\-8_firmware

(Zyxel)
Repositories

Unknown:

This might be proprietary software.
#Vulnerabilities 14
Date Id Summary Products Score Patch Annotated
2019-11-14 CVE-2019-15803 An issue was discovered on Zyxel GS1900 devices with firmware before 2.50(AAHH.0)C0. Through an undocumented sequence of keypresses, undocumented functionality is triggered. A diagnostics shell is triggered via CTRL-ALT-t, which prompts for the password returned by fds_sys_passDebugPasswd_ret(). The firmware contains access control checks that determine if remote users are allowed to access this functionality. The function that performs this check (fds_sys_remoteDebugEnable_ret in libfds.so)... Gs1900\-10hp_firmware, Gs1900\-16_firmware, Gs1900\-24_firmware, Gs1900\-24e_firmware, Gs1900\-24hp_firmware, Gs1900\-48_firmware, Gs1900\-48hp_firmware, Gs1900\-8_firmware, Gs1900\-8hp_firmware N/A
2019-11-14 CVE-2019-15800 An issue was discovered on Zyxel GS1900 devices with firmware before 2.50(AAHH.0)C0. Due to lack of input validation in the cmd_sys_traceroute_exec(), cmd_sys_arp_clear(), and cmd_sys_ping_exec() functions in the libclicmd.so library contained in the firmware, an attacker could leverage these functions to call system() and execute arbitrary commands on the switches. (Note that these functions are currently not called in this version of the firmware, however an attacker could use other... Gs1900\-10hp_firmware, Gs1900\-16_firmware, Gs1900\-24_firmware, Gs1900\-24e_firmware, Gs1900\-24hp_firmware, Gs1900\-48_firmware, Gs1900\-48hp_firmware, Gs1900\-8_firmware, Gs1900\-8hp_firmware N/A
2019-11-14 CVE-2019-15799 An issue was discovered on Zyxel GS1900 devices with firmware before 2.50(AAHH.0)C0. User accounts created through the web interface of the device, when given non-admin level privileges, have the same level of privileged access as administrators when connecting to the device via SSH (while their permissions via the web interface are in fact restricted). This allows normal users to obtain the administrative password by running the tech-support command via the CLI: this contains the encrypted... Gs1900\-10hp_firmware, Gs1900\-16_firmware, Gs1900\-24_firmware, Gs1900\-24e_firmware, Gs1900\-24hp_firmware, Gs1900\-48_firmware, Gs1900\-48hp_firmware, Gs1900\-8_firmware, Gs1900\-8hp_firmware N/A
2017-09-27 CVE-2015-7256 ZyXEL NWA1100-N, NWA1100-NH, NWA1121-NI, NWA1123-AC, and NWA1123-NI access points; P-660HN-51, P-663HN-51, VMG1312-B10A, VMG1312-B30A, VMG1312-B30B, VMG4380-B10A, VMG8324-B10A, VMG8924-B10A, VMG8924-B30A, and VSG1435-B101 DSL CPEs; PMG5318-B20A GPONs; SBG3300-N000, SBG3300-NB00, and SBG3500-N000 small business gateways; GS1900-8 and GS1900-24 switches; and C1000Z, Q1000, FR1000Z, and P8702N project models use non-unique X.509 certificates and SSH host keys. C1000z_firmware, Fr1000z_firmware, Gs1900\-24_firmware, Gs1900\-8_firmware, Nwa1100\-N_firmware, Nwa1100\-Nh_firmware, Nwa1121\-Ni_firmware, Nwa1123\-Ac_firmware, Nwa1123\-Ni_firmware, P8702n_firmware, P\-660hn\-51_firmware, P\-663hn\-51_firmware, Pmg5318\-B20a_firmware, Q1000_firmware, Sbg3300\-N000_firmware, Sbg3300\-Nb00_firmware, Sbg3500\-N000_firmware, Vmg1312\-B10a_firmware, Vmg1312\-B30a_firmware, Vmg1312\-B30b_firmware, Vmg4380\-B10a_firmware, Vmg8324\-B10a_firmware, Vmg8924\-B10a_firmware, Vmg8924\-B30a_firmware, Vsg1435\-B101_firmware 5.9