CVE-2019-15800

🗓️ 14 Nov 2019 20:16:20Reported by mitreType

cve

cve🔗 web.nvd.nist.gov👁 76 Views

An issue was discovered on Zyxel GS1900 devices with firmware before 2.50(AAHH.0)C0. Due to lack of input validation in the cmd_sys_traceroute_exec(), cmd_sys_arp_clear(), and cmd_sys_ping_exec() functions in the libclicmd.so library contained in the firmware, an attacker could leverage these functions to call system() and execute arbitrary commands on the switches

Reporter	Title	Published	Views	Family All 7
CNVD	Unspecified Vulnerability in ZyXEL GS1900 (CNVD-2019-41672)	19 Nov 201900:00	–	cnvd
Cvelist	CVE-2019-15800	14 Nov 201920:16	–	cvelist
EUVD	EUVD-2019-6719	7 Oct 202500:30	–	euvd
NVD	CVE-2019-15800	14 Nov 201921:15	–	nvd
OSV	CVE-2019-15800	14 Nov 201921:15	–	osv
Prion	Input validation	14 Nov 201921:15	–	prion
RedhatCVE	CVE-2019-15800	22 May 202510:20	–	redhatcve

NVD

Node

zyxel gs1900-8_firmwareRange<2.50(aahh.0)c0

AND

zyxel gs1900-8Match-

Node

zyxel gs1900-8hp_firmwareRange<2.50(aahi.0)c0

AND

zyxel gs1900-8hpMatch-

Node

zyxel gs1900-10hp_firmwareRange<2.50(aazi.0)c0

AND

zyxel gs1900-10hpMatch-

Node

zyxel gs1900-16_firmwareRange<2.50(aahj.0)c0

AND

zyxel gs1900-16Match-

Node

zyxel gs1900-24e_firmwareRange<2.50(aahk.0)c0

AND

zyxel gs1900-24eMatch-

Node

zyxel gs1900-24_firmwareRange<2.50(aahl.0)c0

AND

zyxel gs1900-24Match-

Node

zyxel gs1900-24hp_firmwareRange<2.50(aahm.0)c0

AND

zyxel gs1900-24hpMatch-

Node

zyxel gs1900-48_firmwareRange<2.50(aahn.0)c0

AND

zyxel gs1900-48Match-

Node

zyxel gs1900-48hp_firmwareRange<2.50(aaho.0)c0

AND

zyxel gs1900-48hpMatch-

Source	Link
zyxel	www.zyxel.com/support/gs1900-switch-vulnerabilities.shtml
jasper	www.jasper.la/exploring-zyxel-gs1900-firmware-with-ghidra.html

21 Nov 2024 04:29Current

9.9High risk

Vulners AI Score9.9

CVSS 3.19.8

CVSS 210

EPSS0.026

zyxel gs1900 firmware vulnerability input validation code execution nvd cve-2019-15800