Zyxel GS1900 Zero-Day Exploit Persists Despite Patch Release

Researchers at Binarly found that Zyxel GS1900 switches remain vulnerable to a zero-day exploit allowing root command execution despite the vendor's earlier patch. Zyxel has released updated firmware for 10 models to address the issue.

Zyxel GS1900 network switches that received the vendor's earlier fix for an actively exploited flaw are still open to the exploit attackers used, researchers at Binarly found.

The exploit lets anyone who can reach a switch's web management interface run commands on it without logging in. Zyxel has released new firmware for 10 GS1900 models that closes the hole.

The earlier fix is the 2.90

Read original article