CVE-2019-15801: An issue was discovered on Zyxel GS1900 devices with firmware before 2.50(AAHH.0)C0. The firmware image contains encrypted passwords that are used to…

PriorityP343high7.5CVSS 3.1

AVNACLPRNUINSUCHINAN

EPSS

1.49%

71.1th percentile

An issue was discovered on Zyxel GS1900 devices with firmware before 2.50(AAHH.0)C0. The firmware image contains encrypted passwords that are used to authenticate users wishing to access a diagnostics or password-recovery menu. Using the hardcoded cryptographic key found elsewhere in the firmware, these passwords can be decrypted. This is related to fds_sys_passDebugPasswd_ret() and fds_sys_passRecoveryPasswd_ret() in libfds.so.0.0.

Affected

9 ranges

Vendor	Product	Version range	Fixed in
zyxel	gs1900-10hp_firmware	< 2.50\(aazi.0\)c0	2.50\(aazi.0\)c0
zyxel	gs1900-16_firmware	< 2.50\(aahj.0\)c0	2.50\(aahj.0\)c0
zyxel	gs1900-24_firmware	< 2.50\(aahl.0\)c0	2.50\(aahl.0\)c0
zyxel	gs1900-24e_firmware	< 2.50\(aahk.0\)c0	2.50\(aahk.0\)c0
zyxel	gs1900-24hp_firmware	< 2.50\(aahm.0\)c0	2.50\(aahm.0\)c0
zyxel	gs1900-48_firmware	< 2.50\(aahn.0\)c0	2.50\(aahn.0\)c0
zyxel	gs1900-48hp_firmware	< 2.50\(aaho.0\)c0	2.50\(aaho.0\)c0
zyxel	gs1900-8_firmware	< 2.50\(aahh.0\)c0	2.50\(aahh.0\)c0
zyxel	gs1900-8hp_firmware	< 2.50\(aahi.0\)c0	2.50\(aahi.0\)c0

CVSS provenance

nvdv3.17.5HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.