Privilege Escalation Vulnerability in Zyxel GS1900 Series Switches

CVE-2022-45853

What is CVE-2022-45853?

A privilege escalation vulnerability exists in the firmware of Zyxel GS1900 series switches, specifically in the GS1900-8 and GS1900-8HP models. This flaw allows an authenticated local attacker with administrative rights to execute arbitrary system commands at the root level via SSH, potentially compromising the integrity and security of the device. Users are urged to apply firmware updates to mitigate this vulnerability.

References