[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f8oAx7BvkOKE9RN5vQK7Ck9k6OazVTFAxbkkCBdQksgg":3,"g5a-risk:CVE-2019-15802":256},{"success":4,"data":5,"meta":254},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":38,"epssPercentile":26,"epssTimeSeries":39,"severity":40,"affectedProducts":41,"affectedProductsCount":99,"references":100,"referencesCount":112,"weaknesses":113,"weaknessesCount":122,"isActivelyExploited":123,"cisaInfo":26,"otxData":26,"relatedBlogPosts":124,"seoMetadata":125,"configurations":150,"relatedVendorCves":252,"notableEvents":253},"CVE-2019-15802","What is CVE-2019-15802?","An issue was discovered on Zyxel GS1900 devices with firmware before 2.50(AAHH.0)C0. The firmware hashes and encrypts passwords using a hardcoded cryptographic key in sal_util_str_encrypt() in libsal.so.0.0. The parameters (salt, IV, and key data) are used to encrypt and decrypt all passwords using AES256 in CBC mode. With the parameters known, all previously encrypted passwords can be decrypted. This includes the passwords that are part of configuration backups or otherwise embedded as part of the firmware.","An issue was discovered on Zyxel GS1900 devices with firmware before 2.50(AAHH.0)C0. The firmware hashes and encrypts passwords using a hardcoded cryptograph...","2019-11-14T21:15:11.797","2019-11-22T19:11:12.107",5.9,"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":29,"CVSSMetricV40":26},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":22,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":23,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","HIGH","NONE","UNCHANGED","MEDIUM",null,2.2,3.6,[30],{"Source":17,"Type":18,"CVSSData":31,"BaseSeverity":25,"ExploitabilityScore":36,"ImpactScore":37,"ACInsufInfo":26,"ObtainAllPrivilege":26,"ObtainUserPrivilege":26,"ObtainOtherPrivilege":26,"UserInteractionRequired":26},{"Version":32,"VectorString":33,"AccessVector":21,"AccessComplexity":25,"Authentication":23,"ConfidentialityImpact":34,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":35,"BaseSeverity":26,"Exploitability":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"CollateralDamagePotential":26,"TargetDistribution":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"EnvironmentalScore":26},"2.0","AV:N\u002FAC:M\u002FAu:N\u002FC:P\u002FI:N\u002FA:N","PARTIAL",4.3,8.6,2.9,0.015,[38,38,38,38,38,38,38],"Medium",[42,47,51,54,57,60,63,66,69,72,75,78,81,84,87,90,93,96],{"vendor":43,"product":44,"version":45,"criteria":46,"vulnerable":4},"zyxel","gs1900-8_firmware","*","cpe:2.3:o:zyxel:gs1900-8_firmware:*:*:*:*:*:*:*:*",{"vendor":43,"product":48,"version":49,"criteria":50,"vulnerable":4},"gs1900-8","-","cpe:2.3:h:zyxel:gs1900-8:-:*:*:*:*:*:*:*",{"vendor":43,"product":52,"version":45,"criteria":53,"vulnerable":4},"gs1900-8hp_firmware","cpe:2.3:o:zyxel:gs1900-8hp_firmware:*:*:*:*:*:*:*:*",{"vendor":43,"product":55,"version":49,"criteria":56,"vulnerable":4},"gs1900-8hp","cpe:2.3:h:zyxel:gs1900-8hp:-:*:*:*:*:*:*:*",{"vendor":43,"product":58,"version":45,"criteria":59,"vulnerable":4},"gs1900-10hp_firmware","cpe:2.3:o:zyxel:gs1900-10hp_firmware:*:*:*:*:*:*:*:*",{"vendor":43,"product":61,"version":49,"criteria":62,"vulnerable":4},"gs1900-10hp","cpe:2.3:h:zyxel:gs1900-10hp:-:*:*:*:*:*:*:*",{"vendor":43,"product":64,"version":45,"criteria":65,"vulnerable":4},"gs1900-16_firmware","cpe:2.3:o:zyxel:gs1900-16_firmware:*:*:*:*:*:*:*:*",{"vendor":43,"product":67,"version":49,"criteria":68,"vulnerable":4},"gs1900-16","cpe:2.3:h:zyxel:gs1900-16:-:*:*:*:*:*:*:*",{"vendor":43,"product":70,"version":45,"criteria":71,"vulnerable":4},"gs1900-24e_firmware","cpe:2.3:o:zyxel:gs1900-24e_firmware:*:*:*:*:*:*:*:*",{"vendor":43,"product":73,"version":49,"criteria":74,"vulnerable":4},"gs1900-24e","cpe:2.3:h:zyxel:gs1900-24e:-:*:*:*:*:*:*:*",{"vendor":43,"product":76,"version":45,"criteria":77,"vulnerable":4},"gs1900-24_firmware","cpe:2.3:o:zyxel:gs1900-24_firmware:*:*:*:*:*:*:*:*",{"vendor":43,"product":79,"version":49,"criteria":80,"vulnerable":4},"gs1900-24","cpe:2.3:h:zyxel:gs1900-24:-:*:*:*:*:*:*:*",{"vendor":43,"product":82,"version":45,"criteria":83,"vulnerable":4},"gs1900-24hp_firmware","cpe:2.3:o:zyxel:gs1900-24hp_firmware:*:*:*:*:*:*:*:*",{"vendor":43,"product":85,"version":49,"criteria":86,"vulnerable":4},"gs1900-24hp","cpe:2.3:h:zyxel:gs1900-24hp:-:*:*:*:*:*:*:*",{"vendor":43,"product":88,"version":45,"criteria":89,"vulnerable":4},"gs1900-48_firmware","cpe:2.3:o:zyxel:gs1900-48_firmware:*:*:*:*:*:*:*:*",{"vendor":43,"product":91,"version":49,"criteria":92,"vulnerable":4},"gs1900-48","cpe:2.3:h:zyxel:gs1900-48:-:*:*:*:*:*:*:*",{"vendor":43,"product":94,"version":45,"criteria":95,"vulnerable":4},"gs1900-48hp_firmware","cpe:2.3:o:zyxel:gs1900-48hp_firmware:*:*:*:*:*:*:*:*",{"vendor":43,"product":97,"version":49,"criteria":98,"vulnerable":4},"gs1900-48hp","cpe:2.3:h:zyxel:gs1900-48hp:-:*:*:*:*:*:*:*",18,[101,107],{"url":102,"source":103,"tags":104},"https:\u002F\u002Fjasper.la\u002Fexploring-zyxel-gs1900-firmware-with-ghidra.html","Jasper",[105,106],"Exploit","Third Party Advisory",{"url":108,"source":109,"tags":110},"https:\u002F\u002Fwww.zyxel.com\u002Fsupport\u002Fgs1900-switch-vulnerabilities.shtml","Zyxel",[111],"Vendor Advisory",2,[114],{"id":115,"name":116,"description":117,"extendedDescription":118,"status":119,"abstraction":120,"structure":121},"CWE-798","Use of Hard-coded Credentials","The product contains hard-coded credentials, such as a password or cryptographic key.","There are two main variations:","Draft","Base","Simple",1,false,[],{"title":126,"metaDescription":127,"keywords":128,"canonicalUrl":129,"structuredData":130},"What is CVE-2019-15802? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2019-15802, a medium severity cyber security vulnerability from 2019. An issue was discovered on Zyxel GS1900 devices with firm...","CVE-2019-15802, CVE-2019-15802 vulnerability, CVE-2019-15802 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2019, CVSS score, exploit, patch, remediation, zyxel security, gs1900-8_firmware vulnerability, gs1900-8 vulnerability, gs1900-8hp_firmware vulnerability, gs1900-8hp vulnerability, gs1900-10hp_firmware vulnerability","\u002Fwhat-is\u002Fcve-2019-15802",{"@context":131,"@type":132,"headline":126,"description":127,"datePublished":10,"dateModified":11,"author":133,"publisher":137,"about":141,"mainEntityOfPage":145,"articleSection":148,"keywords":149},"https:\u002F\u002Fschema.org","TechArticle",{"@type":134,"name":135,"url":136},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":134,"name":135,"url":136,"logo":138},{"@type":139,"url":140},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":142,"name":6,"description":143,"additionalType":144},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":146,"@id":147},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2019-15802","Cybersecurity","CVE-2019-15802, CVE-2019-15802 vulnerability, CVE-2019-15802 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[151,164,175,186,197,208,219,230,241],{"Operator":152,"Negate":26,"Nodes":153},"AND",[154,160],{"Operator":155,"Negate":26,"CPEMatch":156},"OR",[157],{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":158,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":159,"VersionEndIncluding":26},"B5428A26-563D-47A7-A771-D6F20775EDF5","2.50\\(aahh.0\\)c0",{"Operator":155,"Negate":26,"CPEMatch":161},[162],{"Vulnerable":26,"Criteria":50,"MatchCriteriaID":163,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"51D33F50-B5A4-4AEF-972C-7FF089C21D52",{"Operator":152,"Negate":26,"Nodes":165},[166,171],{"Operator":155,"Negate":26,"CPEMatch":167},[168],{"Vulnerable":4,"Criteria":53,"MatchCriteriaID":169,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":170,"VersionEndIncluding":26},"0E6DB241-5659-414E-856E-C5D790D07F8B","2.50\\(aahi.0\\)c0",{"Operator":155,"Negate":26,"CPEMatch":172},[173],{"Vulnerable":26,"Criteria":56,"MatchCriteriaID":174,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"27602862-EFB7-402B-994E-254A0B210820",{"Operator":152,"Negate":26,"Nodes":176},[177,182],{"Operator":155,"Negate":26,"CPEMatch":178},[179],{"Vulnerable":4,"Criteria":59,"MatchCriteriaID":180,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":181,"VersionEndIncluding":26},"21D9999F-C55E-4BAB-A401-007FB34B2A5E","2.50\\(aazi.0\\)c0",{"Operator":155,"Negate":26,"CPEMatch":183},[184],{"Vulnerable":26,"Criteria":62,"MatchCriteriaID":185,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"89201505-07AF-4F9C-9304-46F2707DB9B4",{"Operator":152,"Negate":26,"Nodes":187},[188,193],{"Operator":155,"Negate":26,"CPEMatch":189},[190],{"Vulnerable":4,"Criteria":65,"MatchCriteriaID":191,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":192,"VersionEndIncluding":26},"52D51F8F-8BCB-4571-A782-264B71C7CD76","2.50\\(aahj.0\\)c0",{"Operator":155,"Negate":26,"CPEMatch":194},[195],{"Vulnerable":26,"Criteria":68,"MatchCriteriaID":196,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"5078F7A5-D03B-4D3A-9C19-57DFF4D6BF7A",{"Operator":152,"Negate":26,"Nodes":198},[199,204],{"Operator":155,"Negate":26,"CPEMatch":200},[201],{"Vulnerable":4,"Criteria":71,"MatchCriteriaID":202,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":203,"VersionEndIncluding":26},"3687A400-9D7F-453A-88D7-C87B85B6E4EB","2.50\\(aahk.0\\)c0",{"Operator":155,"Negate":26,"CPEMatch":205},[206],{"Vulnerable":26,"Criteria":74,"MatchCriteriaID":207,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"A6456AD6-8A1D-4D3D-AC1A-ABE442242B1B",{"Operator":152,"Negate":26,"Nodes":209},[210,215],{"Operator":155,"Negate":26,"CPEMatch":211},[212],{"Vulnerable":4,"Criteria":77,"MatchCriteriaID":213,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":214,"VersionEndIncluding":26},"6733BECF-F9A3-4748-8A96-DFB10A670C35","2.50\\(aahl.0\\)c0",{"Operator":155,"Negate":26,"CPEMatch":216},[217],{"Vulnerable":26,"Criteria":80,"MatchCriteriaID":218,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"F4F55299-70D5-4CE1-A1EC-D79B469B94F7",{"Operator":152,"Negate":26,"Nodes":220},[221,226],{"Operator":155,"Negate":26,"CPEMatch":222},[223],{"Vulnerable":4,"Criteria":83,"MatchCriteriaID":224,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":225,"VersionEndIncluding":26},"5D3A3C5E-2027-40EE-A9EF-983474E9DC07","2.50\\(aahm.0\\)c0",{"Operator":155,"Negate":26,"CPEMatch":227},[228],{"Vulnerable":26,"Criteria":86,"MatchCriteriaID":229,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"74B1D264-99AC-4AA8-955C-602F2DA5B885",{"Operator":152,"Negate":26,"Nodes":231},[232,237],{"Operator":155,"Negate":26,"CPEMatch":233},[234],{"Vulnerable":4,"Criteria":89,"MatchCriteriaID":235,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":236,"VersionEndIncluding":26},"45D88D78-F7C9-45BB-8E47-2BD24B8616B2","2.50\\(aahn.0\\)c0",{"Operator":155,"Negate":26,"CPEMatch":238},[239],{"Vulnerable":26,"Criteria":92,"MatchCriteriaID":240,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"CFB7D4BF-7D17-48D3-990D-4BADAC8BD868",{"Operator":152,"Negate":26,"Nodes":242},[243,248],{"Operator":155,"Negate":26,"CPEMatch":244},[245],{"Vulnerable":4,"Criteria":95,"MatchCriteriaID":246,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":247,"VersionEndIncluding":26},"C6EA6D9E-B5D4-4043-90C5-409B5875A3B5","2.50\\(aaho.0\\)c0",{"Operator":155,"Negate":26,"CPEMatch":249},[250],{"Vulnerable":26,"Criteria":98,"MatchCriteriaID":251,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"566A9E8C-AF55-4331-B9B0-F65EB900B0BE",[],[],{"lastModified":11,"cacheTime":255,"version":32},1792372471517,{"score":257,"band":40,"action":258,"scoredAt":259},42,"Plan remediation","2026-10-16T06:47:16.057489+00:00"]