GS1900
ProductAm I affected?
Checked against NVD affected-version data on our server. Nothing you type is stored.
Security timeline
- Vulnerability reported by Infosecurity MagazineZyxel GS1900 June patch missed flaw used in attacks on 996 switches
- Zero-day reported by The Hacker NewsZyxel GS1900 switches remain exploitable after earlier patch for zero-day
- Zero-day reported by BleepingComputerHackers exploit Zyxel GS1900 zero-day to compromise nearly 1,000 switches
Recent news
Zyxel GS1900 June patch missed flaw used in attacks on 996 switches
Binarly found that Zyxel's June patch for the GS1900 switch line did not block the exploit used against 996 switches. The patch therefore left the flaw open, and devices that rely on it remain exposed to the same attack.
Zyxel GS1900 switches remain exploitable after earlier patch for zero-day
Binarly researchers found that Zyxel GS1900 switches which had received the vendor's earlier fix for an actively exploited zero-day are still vulnerable to the same exploit. The flaw allows unauthenticated command execution as root via the web management interface. Zyxel has released new firmware for 10 GS1900 models that addresses the issue.
Hackers exploit Zyxel GS1900 zero-day to compromise nearly 1,000 switches
A pre-authentication remote code execution zero-day in Zyxel GS1900 switches was exploited before Zyxel patched it. Binarly found the exploit used a previously unknown bug, not the one Zyxel fixed in June. GreyNoise reported that around 17 August an actor exploited 996 GS1900 switches across 48 countries.