Zyxel GS1900 Patch Fails to Block Zero-Day Exploit Allowing Root Command Execution

Zyxel GS1900 net­work swit­ches that re­cei­ved the ven­dor's ear­lier fix for an ac­ti­vely ex­ploi­ted flaw are still open to the ex­ploit at­tac­kers used, re­sear­chers at Bi­narly found. The ex­ploit lets an­yo­ne who can reach a switch's web ma­na­ge­ment in­ter­fa­ce run com­mands on it without log­ging in. Zyxel has re­lea­sed new firm­wa­re for 10 GS1900 mo­dels that clo­ses the hole. The ear­lier fix is the 2.90…