Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An issue was discovered on Zyxel GS1900 devices with firmware before 2.50(AAHH.0)C0. By sending a signal to the CLI process, undocumented functionality is triggered. Specifically, a menu can be triggered by sending the SIGQUIT signal to the CLI application (e.g., through CTRL+\ via SSH). The access control check for this menu does work and prohibits accessing the menu, which contains "Password recovery for specific user" options. The menu is believed to be accessible using a serial console.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
ZyXEL GS1900 输入验证错误漏洞
Vulnerability Description
ZyXEL GS1900是中国台湾合勤(ZyXEL)公司的一款管理型交换机。 使用2.50(AAHH.0)C0之前版本固件的Zyxel GS1900中存在安全漏洞。攻击者可借助借助串行控制台利用该漏洞访问密码恢复菜单。
CVSS Information
N/A
Vulnerability Type
N/A