CVE-2022-0823: Zyxel GS1200-5 Firmware

Medium severity, CVSS 6.2. EPSS: 0.2% chance of exploitation in the next 30 days.

An improper control of interaction frequency vulnerability in Zyxel GS1200 series switches could allow a local attacker to guess the password by using a timing side-channel attack.

Affected products

• Zyxel GS1200-5 Firmware: before 2.00\(abkm.1\) (fixed in 2.00\(abkm.1\))
• Zyxel GS1200-5hp Firmware: before 2.00\(abkn.1\) (fixed in 2.00\(abkn.1\))
• Zyxel GS1200-8 Firmware: before 2.00\(abme.1\) (fixed in 2.00\(abme.1\))
• Zyxel GS1200-8hp Firmware: before 2.00\(abmf.1\) (fixed in 2.00\(abmf.1\))

Published 2022-06-09. Last modified 2026-06-17.