exploit/linux/http/zyxel_lfi_unauth_ssh_rce

weaponized

Zyxel chained RCE using LFI and weak password derivation algorithm

view exploit source metasploittype exploitpublished 2022-02-01catalog metasploit

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2023-28770US	high7.5	57.8% (99th)	Exploit	2023-04-27
The sensitive information exposure vulnerability in the CGI “Export_Log” and the binary “zcmd” in Zyxel DX5401-B0 firmware versions prior to V5.17(ABYO.1)C0 could allow a remote un…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.