PT-2022-6629 · Zyxel · Zyxel Dx5401-B0

Published 2022-02-15 · Updated 2025-01-31 · CVE-2023-28770

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions ZyXEL DX5401-B0 firmware versions prior to V5.17(ABYO.1)C0

Description The issue is related to insufficient protection of service data in the CGI "Export Log" component of the ZyXEL DX5401-B0 firmware. This could allow a remote unauthenticated attacker to read system files and retrieve the supervisor's password from an encrypted file. The attacker can exploit this issue to gain unauthorized access to protected information.

Recommendations For ZyXEL DX5401-B0 firmware versions prior to V5.17(ABYO.1)C0, update to version V5.17(ABYO.1)C0 or later to resolve the issue. As a temporary workaround, consider restricting access to the "Export Log" CGI component and the "zcmd" binary to minimize the risk of exploitation. Avoid using the affected firmware until the issue is resolved.

Exploit

Fix

Information Disclosure

Side Channel Attack

Weakness Enumeration

CWE-200

CWE-203

Related Identifiers

BDU:2023-02891

CVE-2023-28770

Affected Products

Zyxel Dx5401-B0

References · 17

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/zyxel_lfi_unauth_ssh_rce.rb · Exploit
• 🔥 https://packetstorm.news/files/id/172277 · Exploit
• https://bdu.fstec.ru/vul/2023-02891 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-28770 · Security Note
• https://zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-multiple-vulnerabilities · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-28770 · Vendor Advisory
• https://t.me/cibsecurity/62965 · Telegram Post
• https://t.me/cybersecuritytechnologies/8278 · Telegram Post
• https://twitter.com/rst_cloud/status/1854517407097684070 · Twitter Post
• http://packetstormsecurity.com/files/172277/Zyxel-Chained-Remote-Code-Execution.html · Note
• https://twitter.com/rst_cloud/status/1852727240850612237 · Twitter Post
• https://levelblue.com/blogs/labs-research/ngioweb-remains-active-7-years-later · Note
• https://t.me/cvenotify/109520 · Telegram Post
• https://t.me/cvenotify/49170 · Telegram Post
• https://t.me/aptreports/13882 · Telegram Post