Sensitive Information Exposure in Zyxel DX5401-B0 Firmware

CVE-2023-28770

Summary

A sensitive information exposure vulnerability exists in the Zyxel DX5401-B0 firmware, specifically affecting the CGI component "Export_Log" and the binary "zcmd". This flaw enables a remote unauthenticated attacker to gain unauthorized access to system files, potentially allowing them to retrieve sensitive data including the supervisor password stored in an encrypted format. This breach underscores the importance of timely firmware updates and the need for robust security measures to protect against unauthorized access.

References