[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fV8AcBlLFzTmgcIj8mufbG0nFcvgvubJMVfmu7HtZ3dk":3,"g5a-risk:CVE-2019-15803":258},{"success":4,"data":5,"meta":256},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":40,"epssPercentile":27,"epssTimeSeries":41,"severity":42,"affectedProducts":43,"affectedProductsCount":101,"references":102,"referencesCount":114,"weaknesses":115,"weaknessesCount":124,"isActivelyExploited":125,"cisaInfo":27,"otxData":27,"relatedBlogPosts":126,"seoMetadata":127,"configurations":152,"relatedVendorCves":254,"notableEvents":255},"CVE-2019-15803","What is CVE-2019-15803?","An issue was discovered on Zyxel GS1900 devices with firmware before 2.50(AAHH.0)C0. Through an undocumented sequence of keypresses, undocumented functionality is triggered. A diagnostics shell is triggered via CTRL-ALT-t, which prompts for the password returned by fds_sys_passDebugPasswd_ret(). The firmware contains access control checks that determine if remote users are allowed to access this functionality. The function that performs this check (fds_sys_remoteDebugEnable_ret in libfds.so) always return TRUE with no actual checks performed. The diagnostics menu allows for reading\u002Fwriting arbitrary registers and various other configuration parameters which are believed to be related to the network interface chips.","An issue was discovered on Zyxel GS1900 devices with firmware before 2.50(AAHH.0)C0. Through an undocumented sequence of keypresses, undocumented functionali...","2019-11-14T21:15:11.89","2020-08-24T17:37:01.14",9.1,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":27,"CVSSMetricV2":30,"CVSSMetricV40":27},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":23,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",null,3.9,5.2,[31],{"Source":17,"Type":18,"CVSSData":32,"BaseSeverity":37,"ExploitabilityScore":38,"ImpactScore":39,"ACInsufInfo":27,"ObtainAllPrivilege":27,"ObtainUserPrivilege":27,"ObtainOtherPrivilege":27,"UserInteractionRequired":27},{"Version":33,"VectorString":34,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":35,"IntegrityImpact":35,"AvailabilityImpact":23,"BaseScore":36,"BaseSeverity":27,"Exploitability":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"CollateralDamagePotential":27,"TargetDistribution":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"EnvironmentalScore":27},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:N","PARTIAL",6.4,"MEDIUM",10,4.9,0.01323,[40,40,40,40,40,40,40],"Critical",[44,49,53,56,59,62,65,68,71,74,77,80,83,86,89,92,95,98],{"vendor":45,"product":46,"version":47,"criteria":48,"vulnerable":4},"zyxel","gs1900-8_firmware","*","cpe:2.3:o:zyxel:gs1900-8_firmware:*:*:*:*:*:*:*:*",{"vendor":45,"product":50,"version":51,"criteria":52,"vulnerable":4},"gs1900-8","-","cpe:2.3:h:zyxel:gs1900-8:-:*:*:*:*:*:*:*",{"vendor":45,"product":54,"version":47,"criteria":55,"vulnerable":4},"gs1900-8hp_firmware","cpe:2.3:o:zyxel:gs1900-8hp_firmware:*:*:*:*:*:*:*:*",{"vendor":45,"product":57,"version":51,"criteria":58,"vulnerable":4},"gs1900-8hp","cpe:2.3:h:zyxel:gs1900-8hp:-:*:*:*:*:*:*:*",{"vendor":45,"product":60,"version":47,"criteria":61,"vulnerable":4},"gs1900-10hp_firmware","cpe:2.3:o:zyxel:gs1900-10hp_firmware:*:*:*:*:*:*:*:*",{"vendor":45,"product":63,"version":51,"criteria":64,"vulnerable":4},"gs1900-10hp","cpe:2.3:h:zyxel:gs1900-10hp:-:*:*:*:*:*:*:*",{"vendor":45,"product":66,"version":47,"criteria":67,"vulnerable":4},"gs1900-16_firmware","cpe:2.3:o:zyxel:gs1900-16_firmware:*:*:*:*:*:*:*:*",{"vendor":45,"product":69,"version":51,"criteria":70,"vulnerable":4},"gs1900-16","cpe:2.3:h:zyxel:gs1900-16:-:*:*:*:*:*:*:*",{"vendor":45,"product":72,"version":47,"criteria":73,"vulnerable":4},"gs1900-24e_firmware","cpe:2.3:o:zyxel:gs1900-24e_firmware:*:*:*:*:*:*:*:*",{"vendor":45,"product":75,"version":51,"criteria":76,"vulnerable":4},"gs1900-24e","cpe:2.3:h:zyxel:gs1900-24e:-:*:*:*:*:*:*:*",{"vendor":45,"product":78,"version":47,"criteria":79,"vulnerable":4},"gs1900-24_firmware","cpe:2.3:o:zyxel:gs1900-24_firmware:*:*:*:*:*:*:*:*",{"vendor":45,"product":81,"version":51,"criteria":82,"vulnerable":4},"gs1900-24","cpe:2.3:h:zyxel:gs1900-24:-:*:*:*:*:*:*:*",{"vendor":45,"product":84,"version":47,"criteria":85,"vulnerable":4},"gs1900-24hp_firmware","cpe:2.3:o:zyxel:gs1900-24hp_firmware:*:*:*:*:*:*:*:*",{"vendor":45,"product":87,"version":51,"criteria":88,"vulnerable":4},"gs1900-24hp","cpe:2.3:h:zyxel:gs1900-24hp:-:*:*:*:*:*:*:*",{"vendor":45,"product":90,"version":47,"criteria":91,"vulnerable":4},"gs1900-48_firmware","cpe:2.3:o:zyxel:gs1900-48_firmware:*:*:*:*:*:*:*:*",{"vendor":45,"product":93,"version":51,"criteria":94,"vulnerable":4},"gs1900-48","cpe:2.3:h:zyxel:gs1900-48:-:*:*:*:*:*:*:*",{"vendor":45,"product":96,"version":47,"criteria":97,"vulnerable":4},"gs1900-48hp_firmware","cpe:2.3:o:zyxel:gs1900-48hp_firmware:*:*:*:*:*:*:*:*",{"vendor":45,"product":99,"version":51,"criteria":100,"vulnerable":4},"gs1900-48hp","cpe:2.3:h:zyxel:gs1900-48hp:-:*:*:*:*:*:*:*",18,[103,109],{"url":104,"source":105,"tags":106},"https:\u002F\u002Fjasper.la\u002Fexploring-zyxel-gs1900-firmware-with-ghidra.html","Jasper",[107,108],"Exploit","Third Party Advisory",{"url":110,"source":111,"tags":112},"https:\u002F\u002Fwww.zyxel.com\u002Fsupport\u002Fgs1900-switch-vulnerabilities.shtml","Zyxel",[113],"Vendor Advisory",2,[116],{"id":117,"name":118,"description":119,"extendedDescription":120,"status":121,"abstraction":122,"structure":123},"CWE-287","Improper Authentication","When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.","","Draft","Class","Simple",1,false,[],{"title":128,"metaDescription":129,"keywords":130,"canonicalUrl":131,"structuredData":132},"What is CVE-2019-15803? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2019-15803, a critical severity cyber security vulnerability from 2019. An issue was discovered on Zyxel GS1900 devices with fi...","CVE-2019-15803, CVE-2019-15803 vulnerability, CVE-2019-15803 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2019, CVSS score, exploit, patch, remediation, zyxel security, gs1900-8_firmware vulnerability, gs1900-8 vulnerability, gs1900-8hp_firmware vulnerability, gs1900-8hp vulnerability, gs1900-10hp_firmware vulnerability","\u002Fwhat-is\u002Fcve-2019-15803",{"@context":133,"@type":134,"headline":128,"description":129,"datePublished":10,"dateModified":11,"author":135,"publisher":139,"about":143,"mainEntityOfPage":147,"articleSection":150,"keywords":151},"https:\u002F\u002Fschema.org","TechArticle",{"@type":136,"name":137,"url":138},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":136,"name":137,"url":138,"logo":140},{"@type":141,"url":142},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":144,"name":6,"description":145,"additionalType":146},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":148,"@id":149},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2019-15803","Cybersecurity","CVE-2019-15803, CVE-2019-15803 vulnerability, CVE-2019-15803 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[153,166,177,188,199,210,221,232,243],{"Operator":154,"Negate":27,"Nodes":155},"AND",[156,162],{"Operator":157,"Negate":27,"CPEMatch":158},"OR",[159],{"Vulnerable":4,"Criteria":48,"MatchCriteriaID":160,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":161,"VersionEndIncluding":27},"B5428A26-563D-47A7-A771-D6F20775EDF5","2.50\\(aahh.0\\)c0",{"Operator":157,"Negate":27,"CPEMatch":163},[164],{"Vulnerable":27,"Criteria":52,"MatchCriteriaID":165,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"51D33F50-B5A4-4AEF-972C-7FF089C21D52",{"Operator":154,"Negate":27,"Nodes":167},[168,173],{"Operator":157,"Negate":27,"CPEMatch":169},[170],{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":171,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":172,"VersionEndIncluding":27},"0E6DB241-5659-414E-856E-C5D790D07F8B","2.50\\(aahi.0\\)c0",{"Operator":157,"Negate":27,"CPEMatch":174},[175],{"Vulnerable":27,"Criteria":58,"MatchCriteriaID":176,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"27602862-EFB7-402B-994E-254A0B210820",{"Operator":154,"Negate":27,"Nodes":178},[179,184],{"Operator":157,"Negate":27,"CPEMatch":180},[181],{"Vulnerable":4,"Criteria":61,"MatchCriteriaID":182,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":183,"VersionEndIncluding":27},"21D9999F-C55E-4BAB-A401-007FB34B2A5E","2.50\\(aazi.0\\)c0",{"Operator":157,"Negate":27,"CPEMatch":185},[186],{"Vulnerable":27,"Criteria":64,"MatchCriteriaID":187,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"89201505-07AF-4F9C-9304-46F2707DB9B4",{"Operator":154,"Negate":27,"Nodes":189},[190,195],{"Operator":157,"Negate":27,"CPEMatch":191},[192],{"Vulnerable":4,"Criteria":67,"MatchCriteriaID":193,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":194,"VersionEndIncluding":27},"52D51F8F-8BCB-4571-A782-264B71C7CD76","2.50\\(aahj.0\\)c0",{"Operator":157,"Negate":27,"CPEMatch":196},[197],{"Vulnerable":27,"Criteria":70,"MatchCriteriaID":198,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"5078F7A5-D03B-4D3A-9C19-57DFF4D6BF7A",{"Operator":154,"Negate":27,"Nodes":200},[201,206],{"Operator":157,"Negate":27,"CPEMatch":202},[203],{"Vulnerable":4,"Criteria":73,"MatchCriteriaID":204,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":205,"VersionEndIncluding":27},"3687A400-9D7F-453A-88D7-C87B85B6E4EB","2.50\\(aahk.0\\)c0",{"Operator":157,"Negate":27,"CPEMatch":207},[208],{"Vulnerable":27,"Criteria":76,"MatchCriteriaID":209,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"A6456AD6-8A1D-4D3D-AC1A-ABE442242B1B",{"Operator":154,"Negate":27,"Nodes":211},[212,217],{"Operator":157,"Negate":27,"CPEMatch":213},[214],{"Vulnerable":4,"Criteria":79,"MatchCriteriaID":215,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":216,"VersionEndIncluding":27},"6733BECF-F9A3-4748-8A96-DFB10A670C35","2.50\\(aahl.0\\)c0",{"Operator":157,"Negate":27,"CPEMatch":218},[219],{"Vulnerable":27,"Criteria":82,"MatchCriteriaID":220,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"F4F55299-70D5-4CE1-A1EC-D79B469B94F7",{"Operator":154,"Negate":27,"Nodes":222},[223,228],{"Operator":157,"Negate":27,"CPEMatch":224},[225],{"Vulnerable":4,"Criteria":85,"MatchCriteriaID":226,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":227,"VersionEndIncluding":27},"5D3A3C5E-2027-40EE-A9EF-983474E9DC07","2.50\\(aahm.0\\)c0",{"Operator":157,"Negate":27,"CPEMatch":229},[230],{"Vulnerable":27,"Criteria":88,"MatchCriteriaID":231,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"74B1D264-99AC-4AA8-955C-602F2DA5B885",{"Operator":154,"Negate":27,"Nodes":233},[234,239],{"Operator":157,"Negate":27,"CPEMatch":235},[236],{"Vulnerable":4,"Criteria":91,"MatchCriteriaID":237,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":238,"VersionEndIncluding":27},"45D88D78-F7C9-45BB-8E47-2BD24B8616B2","2.50\\(aahn.0\\)c0",{"Operator":157,"Negate":27,"CPEMatch":240},[241],{"Vulnerable":27,"Criteria":94,"MatchCriteriaID":242,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"CFB7D4BF-7D17-48D3-990D-4BADAC8BD868",{"Operator":154,"Negate":27,"Nodes":244},[245,250],{"Operator":157,"Negate":27,"CPEMatch":246},[247],{"Vulnerable":4,"Criteria":97,"MatchCriteriaID":248,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":249,"VersionEndIncluding":27},"C6EA6D9E-B5D4-4043-90C5-409B5875A3B5","2.50\\(aaho.0\\)c0",{"Operator":157,"Negate":27,"CPEMatch":251},[252],{"Vulnerable":27,"Criteria":100,"MatchCriteriaID":253,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"566A9E8C-AF55-4331-B9B0-F65EB900B0BE",[],[],{"lastModified":11,"cacheTime":257,"version":33},1792370592642,{"score":259,"band":260,"action":261,"scoredAt":262},52,"Medium","Plan remediation","2026-10-16T06:47:16.057976+00:00"]