{"cve":"CVE-2019-15802","nvd":{"published":"2019-11-14T21:15:11.797","modified":"2026-06-17T02:21:06.283","status":"Modified","description":"An issue was discovered on Zyxel GS1900 devices with firmware before 2.50(AAHH.0)C0. The firmware hashes and encrypts passwords using a hardcoded cryptographic key in sal_util_str_encrypt() in libsal.so.0.0. The parameters (salt, IV, and key data) are used to encrypt and decrypt all passwords using AES256 in CBC mode. With the parameters known, all previously encrypted passwords can be decrypted. This includes the passwords that are part of configuration backups or otherwise embedded as part of the firmware.","cvss_v4":null,"cvss_v3":{"version":"3.1","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","score":5.9},"cwes":["CWE-798"],"references":["https://jasper.la/exploring-zyxel-gs1900-firmware-with-ghidra.html","https://www.zyxel.com/support/gs1900-switch-vulnerabilities.shtml","https://jasper.la/exploring-zyxel-gs1900-firmware-with-ghidra.html","https://www.zyxel.com/support/gs1900-switch-vulnerabilities.shtml"],"products":["zyxel:gs1900-10hp_firmware","zyxel:gs1900-16_firmware","zyxel:gs1900-24_firmware","zyxel:gs1900-24e_firmware","zyxel:gs1900-24hp_firmware","zyxel:gs1900-48_firmware","zyxel:gs1900-48hp_firmware","zyxel:gs1900-8_firmware","zyxel:gs1900-8hp_firmware"],"source":"nvd","synced_at":"2026-10-19T20:59:25.448946135+00:00"},"epss":{"cve":"CVE-2019-15802","score":0.015,"percentile":0.74287,"date":"2026-10-31"},"kev":null,"osv":[],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}