CVE-2019-15804: zyxel gs1900-10hp_firmware
Vulnerability summary
CVE-2019-15804 is a high (CVSS 7.5) vulnerability in zyxel gs1900-10hp_firmware. EPSS estimates a 0.93% chance of exploitation in the next 30 days, higher than 59.9% of scored vulnerabilities. 1 public exploit is recorded.
Timeline
- 14-11-2019PublishedVulnerability first disclosed.
- 05-08-2024Last modifiedVulnerability information updated.
Description
An issue was discovered on Zyxel GS1900 devices with firmware before 2.50(AAHH.0)C0. By sending a signal to the CLI process, undocumented functionality is triggered. Specifically, a menu can be triggered by sending the SIGQUIT signal to the CLI application (e.g., through CTRL+\ via SSH). The access control check for this menu does work and prohibits accessing the menu, which contains "Password recovery for specific user" options. The menu is believed to be accessible using a serial console.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
0.93%
Chance of exploitation in the next 30 days
Percentile
60%
Versus all other CVEs
30-day change
0.00 pp
From 0.93% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundExploit Reference (jasper.la)
Maturity: unknown
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Zyxel9 products
- gs1900-10hp_firmware< 2.50\(aazi.0\)c0
- gs1900-16_firmware< 2.50\(aahj.0\)c0
- gs1900-24_firmware< 2.50\(aahl.0\)c0
- gs1900-24e_firmware< 2.50\(aahk.0\)c0
- gs1900-24hp_firmware< 2.50\(aahm.0\)c0
1 vendor · 9 products
References
2 links- jasper.la/exploring-zyxel-gs1900-firmware-with-ghidra.htmlX Refsource MISCExploitThird Party Advisory