CVE:CVE-2022-34746
CNNVD:CNNVD-202209-1550
Zyxel GS1900是中国台湾合勤（Zyxel）公司的一款管理型交换机。
Zyxel GS1900 系列 V2.70之前版本存在安全特征问题漏洞，该漏洞源于不正确的使用低熵随机源生成RSA密钥。攻击者利用该漏洞通过在web管理界面的证书中考虑RSA模数N来检索私钥。
solution:Upgrade zyxel gs1900-8_firmware to a higher version than 2.70\(aahh.3\c0,and avoid the version (,2.70\(aahh.3\)c0); Upgrade zyxel gs1900-8hp_firmware to a higher version than 2.70\(aahi.3\c0,and avoid the version (,2.70\(aahi.3\)c0); Upgrade zyxel gs1900-10hp_firmware to a higher version than 2.70\(aazi.3\c0,and avoid the version (,2.70\(aazi.3\)c0); Upgrade zyxel gs1900-16_firmware to a higher version than 2.70\(aahj.3\c0,and avoid the version (,2.70\(aahj.3\)c0); Upgrade zyxel gs1900-24_firmware to a higher version than 2.70\(aahl.3\c0,and avoid the version (,2.70\(aahl.3\)c0); Upgrade zyxel gs1900-24e_firmware to a higher version than 2.70\(aahk.3\c0,and avoid the version (,2.70\(aahk.3\)c0); Upgrade zyxel gs1900-24ep_firmware to a higher version than 2.70\(abto.3\c0,and avoid the version (,2.70\(abto.3\)c0); Upgrade zyxel gs1900-24hpv2_firmware to a higher version than 2.70\(abtp.3\c0,and avoid the version (,2.70\(abtp.3\)c0); Upgrade zyxel gs1900-48_firmware to a higher version than 2.70\(aahn.3\c0,and avoid the version (,2.70\(aahn.3\)c0); Upgrade zyxel gs1900-48hpv2_firmware to a higher version than 2.70\(abtq.3\c0,and avoid the version (,2.70\(abtq.3\)c0)