Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An issue was discovered on Zyxel GS1900 devices with firmware before 2.50(AAHH.0)C0. Due to lack of input validation in the cmd_sys_traceroute_exec(), cmd_sys_arp_clear(), and cmd_sys_ping_exec() functions in the libclicmd.so library contained in the firmware, an attacker could leverage these functions to call system() and execute arbitrary commands on the switches. (Note that these functions are currently not called in this version of the firmware, however an attacker could use other vulnerabilities to finally use these vulnerabilities to gain code execution.)
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
ZyXEL GS1900 输入验证错误漏洞
Vulnerability Description
ZyXEL GS1900是中国台湾合勤（ZyXEL）公司的一款管理型交换机。 使用2.50(AAHH.0)C0之前版本固件的Zyxel GS1900中存在安全漏洞，该漏洞源于libclicmd.so库中的‘cmd_sys_traceroute_exec()’、‘cmd_sys_arp_clear()’和‘cmd_sys_ping_exec()’函数中缺少输入验证检查。攻击者可利用该漏洞在交换机上执行任意代码。
CVSS Information
N/A
Vulnerability Type
N/A