This vulnerability involves a stack-based buffer overflow in the CGI program of Zyxel GS1900-48HPv2 firmware versions through 2.90(ABTQ.1)C0. An unauthenticated attacker on the local network can exploit this flaw by crafting a malicious HTTP request, potentially leading to arbitrary OS command execution. The CVSS 3.1 vector indicates the attack requires local network access (AV:A), low attack complexity (AC:L), no privileges or user interaction (PR:N/UI:N), and results in high impact on confidentiality, integrity, and availability (C:H/I:H/A:H). No vendor advisory or patch information is currently available.

Successful exploitation could allow an unauthenticated attacker on the LAN to execute arbitrary operating system commands on the affected device. This compromises the device's confidentiality, integrity, and availability, potentially leading to full system compromise or disruption of network services.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict LAN access to trusted users and monitor for unusual HTTP requests targeting the device's CGI interface.