CVE-2023-28769
CRITICAL EXPLOITEDZyxel DX5401-B0 Firmware < 5.17(ABYO.1)C0 - Unauthenticated Buffer Overflow in libclinkc.so
Title source: llmExploitation Summary
CVE-2023-28769 has been observed exploited in the wild (reported by VulnCheck KEV).
EIP tracks 1 public exploit, including a Metasploit module exploits/linux/misc/zyxel_multiple_devices_zhttp_lan_rce.
AI-analyzed exploit summary This Metasploit module exploits a buffer overflow in the zhttpd binary on multiple Zyxel devices (CVE-2023-28769) to achieve unauthenticated remote code execution as root. It leverages a crafted URL to trigger the overflow and execute arbitrary commands via a reverse shell payload.
Description
The buffer overflow vulnerability in the library “libclinkc.so” of the web server “zhttpd” in Zyxel DX5401-B0 firmware versions prior to V5.17(ABYO.1)C0 could allow a remote unauthenticated attacker to execute some OS commands or to cause denial-of-service (DoS) conditions on a vulnerable device.
Exploits (1)
This Metasploit module exploits a buffer overflow in the zhttpd binary on multiple Zyxel devices (CVE-2023-28769) to achieve unauthenticated remote code execution as root. It leverages a crafted URL to trigger the overflow and execute arbitrary commands via a reverse shell payload.
References (1)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H