CVE-2022-45853
published 2023-05-30CVE-2022-45853: The privilege escalation vulnerability in the Zyxel GS1900-8 firmware version V2.70(AAHH.3) and the GS1900-8HP firmware version V2.70(AAHI.3) could allow an…
PriorityP428medium6.7CVSS 3.1
AVLACLPRHUINSUCHIHAH
EPSS
0.17%
5.7th percentile
The privilege escalation vulnerability in the Zyxel GS1900-8 firmware version
V2.70(AAHH.3) and the GS1900-8HP firmware version V2.70(AAHI.3) could allow an authenticated, local attacker with administrator privileges to execute some system commands as 'root' on a vulnerable device via SSH.
Affected
12 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| zyxel | gs1900-10hp_firmware | — | — |
| zyxel | gs1900-16_firmware | — | — |
| zyxel | gs1900-24_firmware | — | — |
| zyxel | gs1900-24e_firmware | — | — |
| zyxel | gs1900-24ep_firmware | — | — |
| zyxel | gs1900-24hpv2_firmware | — | — |
| zyxel | gs1900-48_firmware | — | — |
| zyxel | gs1900-48hpv2_firmware | — | — |
| zyxel | gs1900-8_firmware | — | — |
| zyxel | gs1900-8_firmware | — | — |
| zyxel | gs1900-8hp_firmware | — | — |
| zyxel | gs1900-8hp_firmware | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No advisories linked to this vulnerability.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2023-05-30
Published