Zyxel and Veeam Flaws Under Active Exploitation With Command and SYSTEM Access

A security flaw in Zyxel GS1900 series switches is being actively exploited, according to the US Cybersecurity and Infrastructure Security Agency. The agency has added the vulnerability to its Known Exploited Vulnerabilities catalog, indicating that it is being taken advantage of by attackers. The flaw is a stack-based buffer overflow vulnerability that could allow for arbitrary operating system access. It has been patched, but its addition to the catalog suggests that it is still being exploited. A vulnerability in Veeam products is also under active exploitation, granting attackers command and system access.