Thursday 5 November
Global

Your region, kept on this device.

Zyxel GS1900 switches remain exploitable after earlier patch for zero-day

Severity
Critical
Sources
1

researchers found that switches which had received the vendor's earlier fix for an actively exploited zero-day are still vulnerable to the same exploit. The flaw allows unauthenticated command execution as root via the web management interface. Zyxel has released new firmware for 10 GS1900 models that addresses the issue.

For IT people · Written by AI from 1 source · Wrong?

What to do

  1. Install the new firmware Zyxel has released for the affected GS1900 models.
  2. Do not rely on the earlier fix, as it does not block the exploit.
  3. Check whether any Zyxel GS1900 switches are in use on your network.

Written by AI from the sources, checked against them

Full story timeline · 1 update

  1. Thu 5 NovemberZyxel GS1900 Patch Fails to Block Zero-Day Exploit Allowing Root Command ExecutionThe Hacker News

Who reported · 1 outlet

The Hacker News

Who and what is in it

Companies

Products

Report a problem