PT-2023-4340 · Adtran · Adtran Sr400Ac

Ther3D0Ne · Publicado 2023-07-28 · Atualizado 2025-08-12 · CVE-2023-38120

Positive Technologies (AI Summary)

CVSS v2.0

9.0

Alta

Vetor base

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Adtran SR400ac (affected versions not specified)

Description The issue is related to the lack of input validation in the SmartOS WiFi router ADTRAn SR400ac, allowing remote attackers to execute arbitrary code in the context of the root user. The specific flaw exists within the ping command, available over JSON-RPC, where a crafted host parameter can trigger the execution of a system call composed from a user-supplied string. Although authentication is required to exploit this issue, the existing authentication mechanism can be bypassed.

Recommendations As a temporary workaround, consider disabling the ping command over JSON-RPC until a patch is available. Restrict access to the JSON-RPC interface to minimize the risk of exploitation. Avoid using the host parameter in the ping command until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this issue.

Correção

RCE

Command Injection

OS Command Injection

Enumeração de Fraquezas

CWE-77

CWE-78

Identificadores relacionados

BDU:2023-04683

CVE-2023-38120

ZDI-23-1010

Produtos afetados

Adtran Sr400Ac

Referências · 8

• https://t.me/cveNotify/131831 · Publicação no Telegram
• https://zerodayinitiative.com/advisories/ZDI-23-1010 · Nota de Segurança
• https://twitter.com/CVEnew/status/1787185220535599237 · Publicação no Twitter
• https://bdu.fstec.ru/vul/2023-04683 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2023-38120 · Aviso do Fabricante
• https://supportcommunity.adtran.com/t5/Security-Advisories/ADTSA-2023001-Residential-Gateway-amp-Service-Delivery-Gateway/ta-p/38495 · Nota
• https://cybersecurity-help.cz/vdb/SB2023073111 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2023-38120 · Nota de Segurança