GS1900-48HPv2 firmware vulnerability

What happened

A stack-based buffer overflow vulnerability in the CGI program of Zyxel GS1900-48HPv2 firmware versions through 2.90(ABTQ.1)C0 could allow a LAN-based, unauthenticated attacker to exploit the flaw and potentially execute OS commands via a crafted HTTP request.

Affected versions

GS1900-48HPv2 firmware: <= 2.90(ABTQ.1)C0; <= 2.90(AAHH.1)C0; <= 2.90(AAHI.1)C0; <= 2.90(AAZI.1)C0; <= 2.90(AAHJ.1)C0; <= 2.90(AAHL.1)C0; <= 2.90(AAHK.1)C0; <= 2.90(ABTO.1)C0; <= 2.90(ABTP.1)C0; <= 2.90(AAHN.1)C0 Fixed: See vendor advisory.

Why it matters

Review the vendor advisory and exposure of the affected product to determine operational impact.

Detection & mitigation

• Apply vendor-provided updates or mitigations.
• Review affected product exposure and access logs.