Patch Ticker

Zyxel GS1900 switch firmware CGI out-of-bounds write flaw

Anyone on the same network could take over Zyxel switches.

Summary

An out-of-bounds write flaw in the CGI program of Zyxel GS1900 series switch firmware lets an unauthenticated attacker on the same LAN run OS commands via a crafted HTTP request.

Affected when

  • Attacker on the same LAN

What to do

Update each model to its patched version, for example GS1900-24E to 2.90(AAHK.3)C0. Models not in the advisory table are unaffected.

Update to at least the version for your product:

  • Zyxel GS1900-8 2.90(AAHH.3)C0 or later
  • Zyxel GS1900-8HP 2.90(AAHI.3)C0 or later
  • Zyxel GS1900-10HP 2.90(AAZI.3)C0 or later
  • Zyxel GS1900-16 2.90(AAHJ.3)C0 or later
  • Zyxel GS1900-24 2.90(AAHL.3)C0 or later
  • Zyxel GS1900-24E 2.90(AAHK.3)C0 or later
  • Zyxel GS1900-24EP 2.90(ABTO.3)C0 or later
  • Zyxel GS1900-24HPv2 2.90(ABTP.3)C0 or later
  • Zyxel GS1900-48 2.90(AAHN.3)C0 or later
  • Zyxel GS1900-48HPv2 2.90(ABTQ.3)C0 or later

Update these devices now.

  • Zyxel GS1900-8
  • Zyxel GS1900-8HP
  • Zyxel GS1900-10HP
  • Zyxel GS1900-16
  • Zyxel GS1900-24
  • Zyxel GS1900-24E
  • Zyxel GS1900-24EP
  • Zyxel GS1900-24HPv2
  • Zyxel GS1900-48
  • Zyxel GS1900-48HPv2

Fixed in version 2.90(AAHH.3)C0.

Products and platforms

  • Zyxel GS1900-10HP firmware
  • Zyxel GS1900-16 firmware
  • Zyxel GS1900-24 firmware
  • Zyxel GS1900-24E firmware
  • Zyxel GS1900-24EP firmware
  • Zyxel GS1900-48 firmware
  • Zyxel GS1900-48HPv2 firmware
  • Zyxel GS1900-8 firmware
  • Zyxel GS1900-8HP firmware
  • Zyxel GS1900-HPv2 firmware

CVE IDs

Sources

Times

First published

First seen