Product
Zyxel GS1900 series switches are vulnerable to unauthenticated remote code execution due to an out-of-bounds write in the web management interface that persists in previously patched firmware, facilitating credential theft and configuration harvesting by the Red Heron threat actor.