[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fpgmRndqJpZJVKjfAEPdurPe8xYDwGj5llizLWQk4x-Y":3,"g5a-risk:CVE-2019-15801":257},{"success":4,"data":5,"meta":255},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":39,"epssPercentile":26,"epssTimeSeries":40,"severity":41,"affectedProducts":42,"affectedProductsCount":100,"references":101,"referencesCount":113,"weaknesses":114,"weaknessesCount":123,"isActivelyExploited":124,"cisaInfo":26,"otxData":26,"relatedBlogPosts":125,"seoMetadata":126,"configurations":151,"relatedVendorCves":253,"notableEvents":254},"CVE-2019-15801","What is CVE-2019-15801?","An issue was discovered on Zyxel GS1900 devices with firmware before 2.50(AAHH.0)C0. The firmware image contains encrypted passwords that are used to authenticate users wishing to access a diagnostics or password-recovery menu. Using the hardcoded cryptographic key found elsewhere in the firmware, these passwords can be decrypted. This is related to fds_sys_passDebugPasswd_ret() and fds_sys_passRecoveryPasswd_ret() in libfds.so.0.0.","An issue was discovered on Zyxel GS1900 devices with firmware before 2.50(AAHH.0)C0. The firmware image contains encrypted passwords that are used to authent...","2019-11-14T21:15:11.75","2021-07-21T11:39:23.747",7.5,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":29,"CVSSMetricV40":26},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":23,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH",null,3.9,3.6,[30],{"Source":17,"Type":18,"CVSSData":31,"BaseSeverity":36,"ExploitabilityScore":37,"ImpactScore":38,"ACInsufInfo":26,"ObtainAllPrivilege":26,"ObtainUserPrivilege":26,"ObtainOtherPrivilege":26,"UserInteractionRequired":26},{"Version":32,"VectorString":33,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":34,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":35,"BaseSeverity":26,"Exploitability":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"CollateralDamagePotential":26,"TargetDistribution":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"EnvironmentalScore":26},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:N\u002FA:N","PARTIAL",5,"MEDIUM",10,2.9,0.01486,[39,39,39,39,39,39,39],"High",[43,48,52,55,58,61,64,67,70,73,76,79,82,85,88,91,94,97],{"vendor":44,"product":45,"version":46,"criteria":47,"vulnerable":4},"zyxel","gs1900-8_firmware","*","cpe:2.3:o:zyxel:gs1900-8_firmware:*:*:*:*:*:*:*:*",{"vendor":44,"product":49,"version":50,"criteria":51,"vulnerable":4},"gs1900-8","-","cpe:2.3:h:zyxel:gs1900-8:-:*:*:*:*:*:*:*",{"vendor":44,"product":53,"version":46,"criteria":54,"vulnerable":4},"gs1900-8hp_firmware","cpe:2.3:o:zyxel:gs1900-8hp_firmware:*:*:*:*:*:*:*:*",{"vendor":44,"product":56,"version":50,"criteria":57,"vulnerable":4},"gs1900-8hp","cpe:2.3:h:zyxel:gs1900-8hp:-:*:*:*:*:*:*:*",{"vendor":44,"product":59,"version":46,"criteria":60,"vulnerable":4},"gs1900-10hp_firmware","cpe:2.3:o:zyxel:gs1900-10hp_firmware:*:*:*:*:*:*:*:*",{"vendor":44,"product":62,"version":50,"criteria":63,"vulnerable":4},"gs1900-10hp","cpe:2.3:h:zyxel:gs1900-10hp:-:*:*:*:*:*:*:*",{"vendor":44,"product":65,"version":46,"criteria":66,"vulnerable":4},"gs1900-16_firmware","cpe:2.3:o:zyxel:gs1900-16_firmware:*:*:*:*:*:*:*:*",{"vendor":44,"product":68,"version":50,"criteria":69,"vulnerable":4},"gs1900-16","cpe:2.3:h:zyxel:gs1900-16:-:*:*:*:*:*:*:*",{"vendor":44,"product":71,"version":46,"criteria":72,"vulnerable":4},"gs1900-24e_firmware","cpe:2.3:o:zyxel:gs1900-24e_firmware:*:*:*:*:*:*:*:*",{"vendor":44,"product":74,"version":50,"criteria":75,"vulnerable":4},"gs1900-24e","cpe:2.3:h:zyxel:gs1900-24e:-:*:*:*:*:*:*:*",{"vendor":44,"product":77,"version":46,"criteria":78,"vulnerable":4},"gs1900-24_firmware","cpe:2.3:o:zyxel:gs1900-24_firmware:*:*:*:*:*:*:*:*",{"vendor":44,"product":80,"version":50,"criteria":81,"vulnerable":4},"gs1900-24","cpe:2.3:h:zyxel:gs1900-24:-:*:*:*:*:*:*:*",{"vendor":44,"product":83,"version":46,"criteria":84,"vulnerable":4},"gs1900-24hp_firmware","cpe:2.3:o:zyxel:gs1900-24hp_firmware:*:*:*:*:*:*:*:*",{"vendor":44,"product":86,"version":50,"criteria":87,"vulnerable":4},"gs1900-24hp","cpe:2.3:h:zyxel:gs1900-24hp:-:*:*:*:*:*:*:*",{"vendor":44,"product":89,"version":46,"criteria":90,"vulnerable":4},"gs1900-48_firmware","cpe:2.3:o:zyxel:gs1900-48_firmware:*:*:*:*:*:*:*:*",{"vendor":44,"product":92,"version":50,"criteria":93,"vulnerable":4},"gs1900-48","cpe:2.3:h:zyxel:gs1900-48:-:*:*:*:*:*:*:*",{"vendor":44,"product":95,"version":46,"criteria":96,"vulnerable":4},"gs1900-48hp_firmware","cpe:2.3:o:zyxel:gs1900-48hp_firmware:*:*:*:*:*:*:*:*",{"vendor":44,"product":98,"version":50,"criteria":99,"vulnerable":4},"gs1900-48hp","cpe:2.3:h:zyxel:gs1900-48hp:-:*:*:*:*:*:*:*",18,[102,108],{"url":103,"source":104,"tags":105},"https:\u002F\u002Fjasper.la\u002Fexploring-zyxel-gs1900-firmware-with-ghidra.html","Jasper",[106,107],"Exploit","Third Party Advisory",{"url":109,"source":110,"tags":111},"https:\u002F\u002Fwww.zyxel.com\u002Fsupport\u002Fgs1900-switch-vulnerabilities.shtml","Zyxel",[112],"Vendor Advisory",2,[115],{"id":116,"name":117,"description":118,"extendedDescription":119,"status":120,"abstraction":121,"structure":122},"CWE-798","Use of Hard-coded Credentials","The product contains hard-coded credentials, such as a password or cryptographic key.","There are two main variations:","Draft","Base","Simple",1,false,[],{"title":127,"metaDescription":128,"keywords":129,"canonicalUrl":130,"structuredData":131},"What is CVE-2019-15801? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2019-15801, a high severity cyber security vulnerability from 2019. An issue was discovered on Zyxel GS1900 devices with firmwa...","CVE-2019-15801, CVE-2019-15801 vulnerability, CVE-2019-15801 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2019, CVSS score, exploit, patch, remediation, zyxel security, gs1900-8_firmware vulnerability, gs1900-8 vulnerability, gs1900-8hp_firmware vulnerability, gs1900-8hp vulnerability, gs1900-10hp_firmware vulnerability","\u002Fwhat-is\u002Fcve-2019-15801",{"@context":132,"@type":133,"headline":127,"description":128,"datePublished":10,"dateModified":11,"author":134,"publisher":138,"about":142,"mainEntityOfPage":146,"articleSection":149,"keywords":150},"https:\u002F\u002Fschema.org","TechArticle",{"@type":135,"name":136,"url":137},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":135,"name":136,"url":137,"logo":139},{"@type":140,"url":141},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":143,"name":6,"description":144,"additionalType":145},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":147,"@id":148},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2019-15801","Cybersecurity","CVE-2019-15801, CVE-2019-15801 vulnerability, CVE-2019-15801 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[152,165,176,187,198,209,220,231,242],{"Operator":153,"Negate":26,"Nodes":154},"AND",[155,161],{"Operator":156,"Negate":26,"CPEMatch":157},"OR",[158],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":159,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":160,"VersionEndIncluding":26},"B5428A26-563D-47A7-A771-D6F20775EDF5","2.50\\(aahh.0\\)c0",{"Operator":156,"Negate":26,"CPEMatch":162},[163],{"Vulnerable":26,"Criteria":51,"MatchCriteriaID":164,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"51D33F50-B5A4-4AEF-972C-7FF089C21D52",{"Operator":153,"Negate":26,"Nodes":166},[167,172],{"Operator":156,"Negate":26,"CPEMatch":168},[169],{"Vulnerable":4,"Criteria":54,"MatchCriteriaID":170,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":171,"VersionEndIncluding":26},"0E6DB241-5659-414E-856E-C5D790D07F8B","2.50\\(aahi.0\\)c0",{"Operator":156,"Negate":26,"CPEMatch":173},[174],{"Vulnerable":26,"Criteria":57,"MatchCriteriaID":175,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"27602862-EFB7-402B-994E-254A0B210820",{"Operator":153,"Negate":26,"Nodes":177},[178,183],{"Operator":156,"Negate":26,"CPEMatch":179},[180],{"Vulnerable":4,"Criteria":60,"MatchCriteriaID":181,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":182,"VersionEndIncluding":26},"21D9999F-C55E-4BAB-A401-007FB34B2A5E","2.50\\(aazi.0\\)c0",{"Operator":156,"Negate":26,"CPEMatch":184},[185],{"Vulnerable":26,"Criteria":63,"MatchCriteriaID":186,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"89201505-07AF-4F9C-9304-46F2707DB9B4",{"Operator":153,"Negate":26,"Nodes":188},[189,194],{"Operator":156,"Negate":26,"CPEMatch":190},[191],{"Vulnerable":4,"Criteria":66,"MatchCriteriaID":192,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":193,"VersionEndIncluding":26},"52D51F8F-8BCB-4571-A782-264B71C7CD76","2.50\\(aahj.0\\)c0",{"Operator":156,"Negate":26,"CPEMatch":195},[196],{"Vulnerable":26,"Criteria":69,"MatchCriteriaID":197,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"5078F7A5-D03B-4D3A-9C19-57DFF4D6BF7A",{"Operator":153,"Negate":26,"Nodes":199},[200,205],{"Operator":156,"Negate":26,"CPEMatch":201},[202],{"Vulnerable":4,"Criteria":72,"MatchCriteriaID":203,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":204,"VersionEndIncluding":26},"3687A400-9D7F-453A-88D7-C87B85B6E4EB","2.50\\(aahk.0\\)c0",{"Operator":156,"Negate":26,"CPEMatch":206},[207],{"Vulnerable":26,"Criteria":75,"MatchCriteriaID":208,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"A6456AD6-8A1D-4D3D-AC1A-ABE442242B1B",{"Operator":153,"Negate":26,"Nodes":210},[211,216],{"Operator":156,"Negate":26,"CPEMatch":212},[213],{"Vulnerable":4,"Criteria":78,"MatchCriteriaID":214,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":215,"VersionEndIncluding":26},"6733BECF-F9A3-4748-8A96-DFB10A670C35","2.50\\(aahl.0\\)c0",{"Operator":156,"Negate":26,"CPEMatch":217},[218],{"Vulnerable":26,"Criteria":81,"MatchCriteriaID":219,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"F4F55299-70D5-4CE1-A1EC-D79B469B94F7",{"Operator":153,"Negate":26,"Nodes":221},[222,227],{"Operator":156,"Negate":26,"CPEMatch":223},[224],{"Vulnerable":4,"Criteria":84,"MatchCriteriaID":225,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":226,"VersionEndIncluding":26},"5D3A3C5E-2027-40EE-A9EF-983474E9DC07","2.50\\(aahm.0\\)c0",{"Operator":156,"Negate":26,"CPEMatch":228},[229],{"Vulnerable":26,"Criteria":87,"MatchCriteriaID":230,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"74B1D264-99AC-4AA8-955C-602F2DA5B885",{"Operator":153,"Negate":26,"Nodes":232},[233,238],{"Operator":156,"Negate":26,"CPEMatch":234},[235],{"Vulnerable":4,"Criteria":90,"MatchCriteriaID":236,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":237,"VersionEndIncluding":26},"45D88D78-F7C9-45BB-8E47-2BD24B8616B2","2.50\\(aahn.0\\)c0",{"Operator":156,"Negate":26,"CPEMatch":239},[240],{"Vulnerable":26,"Criteria":93,"MatchCriteriaID":241,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"CFB7D4BF-7D17-48D3-990D-4BADAC8BD868",{"Operator":153,"Negate":26,"Nodes":243},[244,249],{"Operator":156,"Negate":26,"CPEMatch":245},[246],{"Vulnerable":4,"Criteria":96,"MatchCriteriaID":247,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":248,"VersionEndIncluding":26},"C6EA6D9E-B5D4-4043-90C5-409B5875A3B5","2.50\\(aaho.0\\)c0",{"Operator":156,"Negate":26,"CPEMatch":250},[251],{"Vulnerable":26,"Criteria":99,"MatchCriteriaID":252,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"566A9E8C-AF55-4331-B9B0-F65EB900B0BE",[],[],{"lastModified":11,"cacheTime":256,"version":32},1792368091846,{"score":258,"band":259,"action":260,"scoredAt":261},48,"Medium","Plan remediation","2026-10-16T06:47:16.057075+00:00"]