CVE-2023-28771
CRITICAL KEVZyxel ATP/USG/ZyWALL/VPN Series Firmware 4.60-5.36 - Unauthenticated Remote Code Execution via IKE Packet Decoder
Title source: llmExploitation Summary
CVE-2023-28771 is actively exploited and listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added May 31, 2023.
EIP tracks 5 public exploits from researchers including benjaminhays, JinParkmida, sf, including a Metasploit module exploits/linux/misc/zyxel_ike_decoder_rce_cve_2023_28771.
AI-analyzed exploit summary This repository contains a functional Python-based PoC for CVE-2023-28771, leveraging Scapy to craft malicious IKEv2 packets with command injection payloads. It supports both direct command execution and reverse shell establishment via crafted Notify payloads.
Description
Improper error message handling in Zyxel ZyWALL/USG series firmware versions 4.60 through 4.73, VPN series firmware versions 4.60 through 5.35, USG FLEX series firmware versions 4.60 through 5.35, and ATP series firmware versions 4.60 through 5.35, which could allow an unauthenticated attacker to execute some OS commands remotely by sending crafted packets to an affected device.
Exploits (5)
This repository contains a functional Python-based PoC for CVE-2023-28771, leveraging Scapy to craft malicious IKEv2 packets with command injection payloads. It supports both direct command execution and reverse shell establishment via crafted Notify payloads.
The repository contains only a React + TypeScript + Vite template with no exploit code or technical details related to CVE-2023-28771. It lacks any functional PoC, scanner, or writeup content.
This repository contains a functional Python-based PoC exploit for CVE-2023-28771, leveraging Scapy to craft malicious IKEv2 packets with command injection payloads. It supports both direct command execution and reverse shell establishment via crafted Notify payloads.
This repository contains a functional exploit PoC for CVE-2023-28771, leveraging a crafted IKEv2 packet to achieve remote command execution (RCE) on vulnerable systems. The exploit uses Scapy to send a malformed IKEv2 packet with a command injection payload, supporting both direct command execution and reverse shell functionality.
This Metasploit module exploits CVE-2023-28771, an unauthenticated remote command injection vulnerability in Zyxel devices' IKE packet decoder over UDP port 500. It crafts a malicious IKE packet with a command injection payload to achieve root-level RCE.
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H