Sensitive Information Exposure in Zyxel DX5401-B0 Firmware

CVE-2023-28770

Summary

A sensitive information exposure vulnerability exists in the Zyxel DX5401-B0 firmware, specifically affecting the CGI component "Export_Log" and the binary "zcmd". This flaw enables a remote unauthenticated attacker to gain unauthorized access to system files, potentially allowing them to retrieve sensitive data including the supervisor password stored in an encrypted format. This breach underscores the importance of timely firmware updates and the need for robust security measures to protect against unauthorized access.

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

Metasploit exploit module for CVE-2023-28770
Created by Rapid7

References