Privilege escalation

2023-05-3011:15:00

PRIOn knowledge base

www.prio-n.com

privilege escalation

zyxel

gs1900-8

firmware

vulnerability

ssh

nvd

6.8 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

The privilege escalation vulnerability in the Zyxel GS1900-8 firmware version

V2.70(AAHH.3) and the GS1900-8HP firmware version V2.70(AAHI.3) could allow an authenticated, local attacker with administrator privileges to execute some system commands as ‘root’ on a vulnerable device via SSH.

CPENameOperatorVersion
gs1900-10hp_firmwareeq2.70.0-aazi.3
gs1900-16_firmwareeq2.70.0-aahj.3
gs1900-24_firmwareeq2.70.0-aahl.3
gs1900-24e_firmwareeq2.70.0-aahk.3
gs1900-24ep_firmwareeq2.70.0-abto.3
gs1900-24hpv2_firmwareeq2.70.0-abtp.3
gs1900-48_firmwareeq2.70.0-aahn.3
gs1900-48hpv2_firmwareeq2.70.0-abtq.3
gs1900-8_firmwareeq2.70.0-aahh.3
gs1900-8hp_firmwareeq2.70.0-aahi.3

Name	Operator	Version
gs1900-10hp_firmware	eq	2.70.0-aazi.3
gs1900-16_firmware	eq	2.70.0-aahj.3
gs1900-24_firmware	eq	2.70.0-aahl.3
gs1900-24e_firmware	eq	2.70.0-aahk.3
gs1900-24ep_firmware	eq	2.70.0-abto.3
gs1900-24hpv2_firmware	eq	2.70.0-abtp.3
gs1900-48_firmware	eq	2.70.0-aahn.3
gs1900-48hpv2_firmware	eq	2.70.0-abtq.3
gs1900-8_firmware	eq	2.70.0-aahh.3
gs1900-8hp_firmware	eq	2.70.0-aahi.3