CVE-2022-45853
The privilege escalation vulnerability in the Zyxel GS1900-8 firmware version V2.70(AAHH.3) and the GS1900-8HP firmware version V2.70(AAHI.3) could allow an authenticated, local attacker with administrator privileges to execute some system commands as 'root' on a vulnerable device via SSH.
- Score
- CVSS 3.1 6.7 Medium
- Status
- Modified - security@zyxel.com.tw
- Published
- 2023-05-30
- Last modified
- 2025-01-10
- Weaknesses
- CWE-269, CWE-276
Affected products
- Gs1900-10hp Firmware (Zyxel)
- Gs1900-16 Firmware (Zyxel)
- Gs1900-24 Firmware (Zyxel)
- Gs1900-24e Firmware (Zyxel)
- Gs1900-24ep Firmware (Zyxel)
- Gs1900-24hpv2 Firmware (Zyxel)
- Gs1900-48 Firmware (Zyxel)
- Gs1900-48hpv2 Firmware (Zyxel)
- Gs1900-8 Firmware (Zyxel)
- Gs1900-8hp Firmware (Zyxel)
References
- https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-privilege-escalation-vulnerabil…
