According to Bleeping Computer, Zyxel has released a fix for a zero-day vulnerability in its GS1900 series network switches. The vulnerability was actively exploited by threat actors to compromise devices worldwide.
Affected devices included network switches running the vulnerable firmware version. Hackers gained access and retrieved configuration files as well as credentials from compromised units.
The issue involved unauthorized remote exploitation without requiring authentication. Zyxel confirmed the patch addresses the root cause of the vulnerability. No details were provided about the duration of exposure, number of affected installations beyond the reported near-1,000 devices, or specific geographic distribution.
Organizations using the GS1900 series should apply the update promptly if their devices run the vulnerable firmware. Zyxel did not specify rollback procedures, ongoing monitoring requirements, or additional customer support actions in the statement.
