CVE-2019-15801: High severity zyxel gs1900-8hp firmware vulnerability
An issue was discovered on Zyxel GS1900 devices with firmware before 2.50(AAHH.0)C0. The firmware image contains encrypted passwords that are used to authenticate users wishing to access a diagnostics or password-recovery menu. Using the hardcoded cryptographic key found elsewhere in the firmware, these passwords can be decrypted. This is related to fdssyspassDebugPasswdret() and fdssyspassRecoveryPasswdret() in libfds.so.0.0.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2019-15801?
CVE-2019-15801 is a vulnerability found on Zyxel GS1900 devices with firmware before 2.50(AAHH.0)C0.
What is the severity of CVE-2019-15801?
The severity of CVE-2019-15801 is high, with a severity value of 7.5.
How does CVE-2019-15801 affect Zyxel GS1900 devices?
CVE-2019-15801 allows attackers to access a diagnostics or password-recovery menu on Zyxel GS1900 devices.
How can I fix CVE-2019-15801?
To fix CVE-2019-15801, update the firmware of Zyxel GS1900 devices to version 2.50(AAHH.0)C0 or later.
Where can I find more information about CVE-2019-15801?
You can find more information about CVE-2019-15801 at the following links: [link1](https://jasper.la/exploring-zyxel-gs1900-firmware-with-ghidra.html), [link2](https://www.zyxel.com/support/gs1900-switch-vulnerabilities.shtml).