Source: thehackernews.com
Zyxel GS1900 network switches remain vulnerable to an actively exploited zero-day flaw despite a previously released patch. Researchers at Binarly discovered that the earlier fix (firmware version 2.90) failed to fully remediate the vulnerability. The exploit allows unauthenticated attackers who can reach the switch's web management interface to execute arbitrary commands with root privileges. Zyxel has responded by releasing new firmware for 10 affected GS1900 switch models. The flaw is particularly critical as it requires no authentication and targets network infrastructure devices. Organizations using GS1900 switches should apply the latest firmware immediately to close the exposure.
