Zyxel Releases Security Updates
Security updates address vulnerabilities in Zyxel routers and switches
Summary
Security updates address vulnerabilities in Zyxel routers and switches
Affected platforms
The following platforms are known to be affected:
Threat details
Introduction
Zyxel has released security updates to address vulnerabilities in 4G LTE routers, 5G NR outdoor routers and GS1900 series switches.
In the first security advisory, a buffer overflow vulnerability in the CGI program of some Zyxel 4G LTE and 5G NR outdoor routers could allow a remote authenticated attacker to cause denial-of-service conditions by sending a specially crafted HTTP request to a vulnerable device.
In the second security advisory, a privilege escalation vulnerability in the Zyxel GS1900 series switches could allow a local authenticated attacker with administrator privileges to execute some system commands as the root user on a vulnerable device.
Remediation advice
Affected organisations are encouraged to review Zyxel's security advisories and apply the relevant updates.
Remediation steps
| Type | Step |
|---|---|
| Patch |
Zyxel security advisory for buffer overflow vulnerability in 4G LTE and 5G NR outdoor routers https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-buffer-overflow-vulnerability-in-4g-lte-and-5g-nr-outdoor-routers |
| Patch |
Zyxel security advisory for privilege escalation vulnerability in GS1900 series switches https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-privilege-escalation-vulnerability-in-gs1900-series-switches |
Definitive source of threat updates
- https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-buffer-overflow-vulnerability-in-4g-lte-and-5g-nr-outdoor-routers
- https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-privilege-escalation-vulnerability-in-gs1900-series-switches
CVE Vulnerabilities
Last edited: 7 June 2023 3:22 pm