CVE-2019-15801

CWE-798 — Hard-coded CredentialsCWE-522 — Insufficiently Protected Credentials3 documents3 sources
Severity
7.5HIGH
EPSS
0.3%
top 47.88%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
9
Zyxel Gs1900-10hp FirmwareZyxel Gs1900-16 FirmwareZyxel Gs1900-24 Firmware+6 more
Timeline
PublishedNov 14
Latest updateMay 24

Description

An issue was discovered on Zyxel GS1900 devices with firmware before 2.50(AAHH.0)C0. The firmware image contains encrypted passwords that are used to authenticate users wishing to access a diagnostics or password-recovery menu. Using the hardcoded cryptographic key found elsewhere in the firmware, these passwords can be decrypted. This is related to fds_sys_passDebugPasswd_ret() and fds_sys_passRecoveryPasswd_ret() in libfds.so.0.0.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NExploitability: 3.9 | Impact: 3.6

Affected Packages9 packages

▶NVDzyxel/gs1900-8_firmware< 2.50\(aahh.0\)c0
▶NVDzyxel/gs1900-16_firmware< 2.50\(aahj.0\)c0
▶NVDzyxel/gs1900-24_firmware< 2.50\(aahl.0\)c0
▶NVDzyxel/gs1900-48_firmware< 2.50\(aahn.0\)c0
▶NVDzyxel/gs1900-24e_firmware< 2.50\(aahk.0\)c0

🔴Vulnerability Details

2
GHSA
GHSA-g22q-gmqw-xvw4: An issue was discovered on Zyxel GS1900 devices with firmware before 2↗2022-05-24
▶
CVEList
CVE-2019-15801: An issue was discovered on Zyxel GS1900 devices with firmware before 2↗2019-11-14
▶