Zyxel GS1900 Switch Firmware Patch Inadequate Against Actively Exploited Zero-Day
Researchers discover earlier fix leaves critical vulnerability open; new firmware released for 10 models
Key Takeaways
- Earlier firmware patch for Zyxel GS1900 switches failed to block an actively exploited zero-day vulnerability.
- The flaw allows unauthenticated root command execution via the web management interface.
- Binarly researchers confirmed the vulnerability remains open on patched devices.
- Zyxel has released new firmware for 10 GS1900 models to address the issue.
Related Security News
CISA Flags Actively Exploited WordPress RCE Vulnerability
The US Cybersecurity and Infrastructure Security Agency (CISA) has added a high-severity WordPress remote code execution vulnerability to its Known Exploited Vulnerabilities (KEV) catalog, citing active exploitation in the wild. Federal agencies are directed to apply the patch immediately, and global WordPress users are strongly advised to update to mitigate the risk.
OpenSSH Authentication Bypass Vulnerability Affects Password-Disabled Accounts on musl-based Linux
A vulnerability in OpenSSH has been disclosed that allows attackers to authenticate to accounts configured to block password-based login, such as those using the '!' prefix in /etc/shadow on Alpine Linux and other musl-based distributions. The issue stems from the handling of password strings exceeding the expected buffer size, causing the authentication check to be bypassed. The flaw affects OpenSSH implementations on systems using the musc libc library. No official CVE has been assigned as of the initial disclosure, and details regarding the exact technical mechanism and affected versions are pending formal advisory release.
