Zyxel GS1900 switches remain exploitable after earlier patch for zero-day
ZERO-DAYZyxelredteam/daily · 1 source
- Severity
- Critical
- Sources
- 1
What happened
Binarly reports that Zyxel GS1900 switches with the vendor's earlier fix (the article cites version 2.90 but is truncated, so the exact patched build is unconfirmed) remain exploitable with the zero-day exploit used in active attacks. The flaw permits unauthenticated command execution as root through the web management interface. Zyxel has issued new firmware for 10 GS1900 models; no CVE identifiers appear in the source. Defenders should apply the new firmware and not rely on the earlier fix, and should confirm whether any GS1900 devices are internet-reachable or exposed to untrusted networks.
For security analysts · Written by AI from 1 source · Wrong?
What to do
- Install the new firmware Zyxel has released for the affected GS1900 models.
- Do not rely on the earlier fix, as it does not block the exploit.
- Check whether any Zyxel GS1900 switches are in use on your network.
Written by AI from the sources, checked against them
Full story timeline · 1 update
Who reported · 1 outlet
The Hacker News
Who and what is in it
Products