PT-2023-8185 · Zyxel · Zyxel Gs1900-8

Justin Aarden · Published 2023-05-30 · Updated 2025-01-10 · CVE-2022-45853

Positive Technologies (AI Summary)

CVSS v3.1

6.7

Medium

Base vector

AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Zyxel GS1900-8 firmware version V2.70(AAHH.3) Zyxel GS1900-8HP firmware version V2.70(AAHI.3)

Description The issue is related to a privilege escalation vulnerability that could allow an authenticated, local attacker with administrator privileges to execute system commands as 'root' on a vulnerable device via SSH. This is due to insecure privilege management in the firmware of Zyxel GS1900 series switches. An attacker could exploit this vulnerability to execute arbitrary commands and elevate their privileges to the root level.

Recommendations For Zyxel GS1900-8 firmware version V2.70(AAHH.3), consider disabling SSH access until a patch is available. For Zyxel GS1900-8HP firmware version V2.70(AAHI.3), restrict access to system commands to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Incorrect Default Permissions

Improper Privilege Management

Weakness Enumeration

CWE-276

CWE-269

Related Identifiers

BDU:2024-00173

CVE-2022-45853

Affected Products

Zyxel Gs1900-8

References · 7

• https://osv.dev/vulnerability/CVE-2022-45853 · Vendor Advisory
• https://zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-privilege-escalation-vulnerability-in-gs1900-series-switches · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-00173 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-45853 · Security Note
• https://t.me/cibsecurity/64780 · Telegram Post
• https://t.me/cvenotify/107084 · Telegram Post
• https://t.me/cvenotify/51832 · Telegram Post