CVE-2019-15800

🗓️ 14 Nov 2019 20:16:20Reported by mitreType

An issue was discovered on Zyxel GS1900 devices with firmware before 2.50(AAHH.0)C0. Due to lack of input validation in the cmd_sys_traceroute_exec(), cmd_sys_arp_clear(), and cmd_sys_ping_exec() functions in the libclicmd.so library contained in the firmware, an attacker could leverage these functions to call system() and execute arbitrary commands on the switches

Reporter	Title	Published	Views	Family All 8
BDU FSTEC	The vulnerabilities of the functions cmd_sys_traceroute_exec(), cmd_sys_arp_clear(), and cmd_sys_ping_exec() in the libclicmd.so library of the Zyxel GS1900 router microsystem software allow a attacker to execute arbitrary commands.	17 Dec 201900:00	–	bdu_fstec
CNVD	Unspecified Vulnerability in ZyXEL GS1900 (CNVD-2019-41672)	19 Nov 201900:00	–	cnvd
Cvelist	CVE-2019-15800	14 Nov 201920:16	–	cvelist
EUVD	EUVD-2019-6719	7 Oct 202500:30	–	euvd
NVD	CVE-2019-15800	14 Nov 201921:15	–	nvd
OSV	CVE-2019-15800	14 Nov 201921:15	–	osv
Prion	Input validation	14 Nov 201921:15	–	prion
RedhatCVE	CVE-2019-15800	22 May 202510:20	–	redhatcve