CVE-2022-45853

6.7 mediumEPSS 0.2%

The privilege escalation vulnerability in the Zyxel GS1900-8 firmware version V2.70(AAHH.3) and the GS1900-8HP firmware version V2.70(AAHI.3) could allow an authenticated, local attacker with administrator privileges to execute some system commands as 'root' on a vulnerable device via SSH.

Severity

CVSS 3.1

6.7 medium

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 6% of CVEs (scores of 2026-10-31)
CWEs: CWE-269, CWE-276
Published: 2023-05-30
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

zyxel:gs1900-10hp_firmware
zyxel:gs1900-16_firmware
zyxel:gs1900-24_firmware
zyxel:gs1900-24e_firmware
zyxel:gs1900-24ep_firmware
zyxel:gs1900-24hpv2_firmware
zyxel:gs1900-48_firmware
zyxel:gs1900-48hpv2_firmware
zyxel:gs1900-8_firmware
zyxel:gs1900-8hp_firmware

References

https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-privilege-escalation-vulnerability-in-gs1900-series-switches
https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-privilege-escalation-vulnerability-in-gs1900-series-switches

Check your stack JSON