PT-2023-8185 · Zyxel · Zyxel Gs1900-8

Justin Aarden · Publicado 2023-05-30 · Atualizado 2025-01-10 · CVE-2022-45853

Positive Technologies (AI Summary)

CVSS v3.1

6.7

Média

Vetor base

AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Zyxel GS1900-8 firmware version V2.70(AAHH.3) Zyxel GS1900-8HP firmware version V2.70(AAHI.3)

Description The issue is related to a privilege escalation vulnerability that could allow an authenticated, local attacker with administrator privileges to execute system commands as 'root' on a vulnerable device via SSH. This is due to insecure privilege management in the firmware of Zyxel GS1900 series switches. An attacker could exploit this vulnerability to execute arbitrary commands and elevate their privileges to the root level.

Recommendations For Zyxel GS1900-8 firmware version V2.70(AAHH.3), consider disabling SSH access until a patch is available. For Zyxel GS1900-8HP firmware version V2.70(AAHI.3), restrict access to system commands to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Incorrect Default Permissions

Improper Privilege Management

Enumeração de Fraquezas

CWE-276

CWE-269

Identificadores relacionados

BDU:2024-00173

CVE-2022-45853

Produtos afetados

Zyxel Gs1900-8

Referências · 7

• https://osv.dev/vulnerability/CVE-2022-45853 · Aviso do Fabricante
• https://zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-privilege-escalation-vulnerability-in-gs1900-series-switches · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2024-00173 · Nota de Segurança
• https://t.me/cibsecurity/64780 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2022-45853 · Nota de Segurança
• https://t.me/cvenotify/107084 · Publicação no Telegram
• https://t.me/cvenotify/51832 · Publicação no Telegram