PT-2023-4340 · Adtran · Adtran Sr400Ac

Ther3D0Ne · Published 2023-07-28 · Updated 2025-08-12 · CVE-2023-38120

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Adtran SR400ac (affected versions not specified)

Description The issue is related to the lack of input validation in the SmartOS WiFi router ADTRAn SR400ac, allowing remote attackers to execute arbitrary code in the context of the root user. The specific flaw exists within the ping command, available over JSON-RPC, where a crafted host parameter can trigger the execution of a system call composed from a user-supplied string. Although authentication is required to exploit this issue, the existing authentication mechanism can be bypassed.

Recommendations As a temporary workaround, consider disabling the ping command over JSON-RPC until a patch is available. Restrict access to the JSON-RPC interface to minimize the risk of exploitation. Avoid using the host parameter in the ping command until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this issue.

Fix

RCE

Command Injection

OS Command Injection

Weakness Enumeration

CWE-77

CWE-78

Related Identifiers

BDU:2023-04683

CVE-2023-38120

ZDI-23-1010

Affected Products

Adtran Sr400Ac

References · 8

• https://zerodayinitiative.com/advisories/ZDI-23-1010 · Security Note
• https://bdu.fstec.ru/vul/2023-04683 · Security Note
• https://osv.dev/vulnerability/CVE-2023-38120 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-38120 · Security Note
• https://t.me/cveNotify/131831 · Telegram Post
• https://twitter.com/CVEnew/status/1787185220535599237 · Twitter Post
• https://supportcommunity.adtran.com/t5/Security-Advisories/ADTSA-2023001-Residential-Gateway-amp-Service-Delivery-Gateway/ta-p/38495 · Note
• https://cybersecurity-help.cz/vdb/SB2023073111 · Note