CVE-2023-28769

🗓️ 27 Apr 2023 00:00:00Reported by ZyxelType

cve🔗 web.nvd.nist.gov👁 83 Views🌐 WEB

CVE-2023-28769 buffer overflow in Zyxel DX5401-B0 firmwar

Reporter	Title	Published	Views	Family All 14
BDU FSTEC	The vulnerability of the zhttpd component in the libclinkc.so library of the ZyXEL DX5401-B0 router’s software allows a malicious actor to execute certain operating system commands remotely.	3 May 202300:00	–	bdu_fstec
Circl	CVE-2023-28769	21 Mar 202319:23	–	circl
CNNVD	Zyxel DX5401-B0 安全漏洞	27 Apr 202300:00	–	cnnvd
Cvelist	CVE-2023-28769	27 Apr 202300:00	–	cvelist
Metasploit	Zyxel Unauthenticated LAN Remote Code Execution	21 Mar 202319:50	–	metasploit
NVD	CVE-2023-28769	27 Apr 202309:15	–	nvd
OpenVAS	Zyxel Devices Multiple Vulnerabilities (Dec 2022) - Active Check	19 Dec 202200:00	–	openvas
OSV	CVE-2023-28769	27 Apr 202309:15	–	osv
Prion	Buffer overflow	27 Apr 202309:15	–	prion
Positive Technologies	PT-2023-2520 · Zyxel · Zyxel Dx5401-B0	27 Apr 202300:00	–	ptsecurity

NVD

Node

zyxel dx5401-b0_firmwareRange<5.17(abyo.1)c0

AND

zyxel dx5401-b0Match-

[
  {
    "vendor": "Zyxel",
    "product": "DX5401-B0 firmware",
    "versions": [
      {
        "version": "< V5.17(ABYO.1)C0",
        "status": "affected"
      }
    ]
  }
]

Source	Link
zyxel	www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-multiple-vulnerabilities

Parameter	Position	Path	Description	CWE
?/etc/passwd	path	Export_Log?/etc/passwd	Path traversal exposure of /etc/passwd via Export_Log	CWE-120
#{exploit_url}	query param	Export_Log?#{exploit_url}	Buffer overflow exploit payload delivered via Export_Log to trigger RCE	CWE-120

17 Jun 2026 05:48Current

9.8High risk

Vulners AI Score9.8

CVSS 3.19.8

EPSS0.0542

SSVC

CWE-120