CVE-2022-45853

CVSS 6.7 MEDIUMEPSS 0.2%CWE-269 CWE-276

The privilege escalation vulnerability in the Zyxel GS1900-8 firmware version V2.70(AAHH.3) and the GS1900-8HP firmware version V2.70(AAHI.3) could allow an authenticated, local attacker with administrator privileges to execute some system commands as 'root' on a vulnerable device via SSH.

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Affected products

Zyxel · GS1900-8 firmware Zyxel · GS1900-8HP firmware

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-privilege-escalation-vulnerability-in-gs1900-series-switches