CVE-2019-15801

An issue was discovered on Zyxel GS1900 devices with firmware before 2.50(AAHH.0)C0. The firmware image contains encrypted passwords that are used to authenticate users wishing to access a diagnostics or password-recovery menu. Using the hardcoded cryptographic key found elsewhere in the firmware, these passwords can be decrypted. This is related to fds_sys_passDebugPasswd_ret() and fds_sys_passRecoveryPasswd_ret() in libfds.so.0.0.

• CWE-798

• https://jasper.la/exploring-zyxel-gs1900-firmware-with-ghidra.htmlExploit, Third Party Advisory
• https://www.zyxel.com/support/gs1900-switch-vulnerabilities.shtmlVendor Advisory
• https://jasper.la/exploring-zyxel-gs1900-firmware-with-ghidra.htmlExploit, Third Party Advisory
• https://www.zyxel.com/support/gs1900-switch-vulnerabilities.shtmlVendor Advisory

Published

Nov 14, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-15796Python-apt doesn't check if hashes are signed in `Version.fe…4.7
• CVE-2019-15797Rejected reason: CVE ID was once reserved, but never used.
• CVE-2019-15798Rejected reason: CVE ID was once reserved, but never used.
• CVE-2019-15799An issue was discovered on Zyxel GS1900 devices with firmwar…8.8
• CVE-2019-1580Memory corruption in PAN-OS 7.1.24 and earlier, PAN-OS 8.0.1…
• CVE-2019-15800An issue was discovered on Zyxel GS1900 devices with firmwar…9.8
• CVE-2019-15802An issue was discovered on Zyxel GS1900 devices with firmwar…5.9
• CVE-2019-15803An issue was discovered on Zyxel GS1900 devices with firmwar…9.1
• CVE-2019-15804An issue was discovered on Zyxel GS1900 devices with firmwar…7.5
• CVE-2019-15805CommScope ARRIS TR4400 devices with firmware through A1.00.0…
• CVE-2019-15806CommScope ARRIS TR4400 devices with firmware through A1.00.0…
• CVE-2019-15807In the Linux kernel before 5.1.13, there is a memory leak in…4.7