CVE-2022-45853 MEDIUM

CVE-2022-45853

Vendor Zyxel
Product GS1900-8HP firmware
Weakness CWE-269
Published May 30, 2023
Last update January 10, 2025
View on NVD All CVEs

CVSS base score

6.7/10
Attack vector Local
Attack complexity Low
Privileges required High
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

The privilege escalation vulnerability in the Zyxel GS1900-8 firmware version V2.70(AAHH.3) and the GS1900-8HP firmware version V2.70(AAHI.3) could allow an authenticated, local attacker with administrator privileges to execute some system commands as 'root' on a vulnerable device via SSH.

Key dates

02Disclosure timeline

May 30, 2023 CVE published
January 10, 2025 Record updated

Related vulnerabilities

04Related CVE

CVE-2025-11923 LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes - Various Versions - Authenticated (Student+) Privilege Escalation CVE-2025-13176 Local privilege escalation in ESET Inspect Connector for Windows CVE-2025-49758 Microsoft SQL Server Elevation of Privilege Vulnerability CVE-2025-4879 Citrix Workspace App for Windows - Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges CVE-2020-3393 Cisco IOS XE Software IOx Application Hosting Privilege Escalation Vulnerability