CVE-2022-45853

🗓️ 30 May 2023 10:02:46Reported by ZyxelType

Privilege escalation vulnerability in Zyxel GS1900-8 firmware allowing local attacker to execute commands as 'root' via SSH

Reporter	Title	Published	Views	Family All 14
BDU FSTEC	Zyxel GS1900 series Switch Privilege Escalation	11 Jan 202400:00	–	bdu_fstec
Circl	CVE-2022-45853	10 Jan 202518:03	–	circl
CNNVD	Zyxel GS1900-8 security vulnerabilities	30 May 202300:00	–	cnnvd
Cvelist	CVE-2022-45853	30 May 202310:02	–	cvelist
EUVD	EUVD-2022-48707	3 Oct 202520:07	–	euvd
NVD	CVE-2022-45853	30 May 202311:15	–	nvd
osv_cve	CVE-2022-45853	30 May 202311:15	–	osv_cve
Prion	Privilege escalation	30 May 202311:15	–	prion
Positive Technologies	PT-2023-8185 · Zyxel · Zyxel Gs1900-8	30 May 202300:00	–	ptsecurity
Rapid7 Vulnerability Database (full)	CVE-2022-45853: Improper Privilege Management	30 May 202300:00	–	rapid7

NVD

Vulners

Node

AND

zyxel gs1900-8_firmwareMatch2.70(aahh.3)

zyxel gs1900-8Match-

Node

AND

zyxel gs1900-8hp_firmwareMatch2.70(aahi.3)

zyxel gs1900-8hpMatch-

Node

AND

zyxel gs1900-10hp_firmwareMatch2.70(aazi.3)

zyxel gs1900-10hpMatch-

Node

AND

zyxel gs1900-16_firmwareMatch2.70(aahj.3)

zyxel gs1900-16Match-

Node

AND

zyxel gs1900-24_firmwareMatch2.70(aahl.3)

zyxel gs1900-24Match-

Node

AND

zyxel gs1900-24e_firmwareMatch2.70(aahk.3)

zyxel gs1900-24eMatch-

Node

AND

zyxel gs1900-24ep_firmwareMatch2.70(abto.3)

zyxel gs1900-24epMatch-

Node

AND

zyxel gs1900-24hpv2_firmwareMatch2.70(abtp.3)

zyxel gs1900-24hpv2Match-

Node

AND

zyxel gs1900-48_firmwareMatch2.70(aahn.3)

zyxel gs1900-48Match-

Node

AND

zyxel gs1900-48hpv2_firmwareMatch2.70(abtq.3)

zyxel gs1900-48hpv2Match-

[
  {
    "defaultStatus": "unaffected",
    "product": "GS1900-8HP firmware",
    "vendor": "Zyxel",
    "versions": [
      {
        "status": "affected",
        "version": "V2.70(AAHI.3)"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "GS1900-8 firmware",
    "vendor": "Zyxel",
    "versions": [
      {
        "status": "affected",
        "version": "V2.70(AAHH.3)"
      }
    ]
  }
]

Source	Link
zyxel	www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-privilege-escalation-vulnerability-in-gs1900-series-switches

17 Jun 2026 05:10Current

7.2High risk

Vulners AI Score7.2

CVSS 3.16.7

EPSS0.0017

SSVC