Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An issue was discovered on Zyxel GS1900 devices with firmware before 2.50(AAHH.0)C0. The firmware hashes and encrypts passwords using a hardcoded cryptographic key in sal_util_str_encrypt() in libsal.so.0.0. The parameters (salt, IV, and key data) are used to encrypt and decrypt all passwords using AES256 in CBC mode. With the parameters known, all previously encrypted passwords can be decrypted. This includes the passwords that are part of configuration backups or otherwise embedded as part of the firmware.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
ZyXEL GS1900 信任管理问题漏洞
Vulnerability Description
ZyXEL GS1900是中国台湾合勤（ZyXEL）公司的一款管理型交换机。 使用2.50(AAHH.0)C0之前本版固件的Zyxel GS1900中存在安全漏洞。攻击者可利用该漏洞解密之前加密的密码。
CVSS Information
N/A
Vulnerability Type
N/A