The sensitive information exposure vulnerability in the CGI “Export_Log” and the binary “zcmd” in Zyxel DX5401-B0…
Zyxel · DX5401-B0 firmware
A sensitive information exposure flaw in the "Export_Log" CGI and the "zcmd" binary of the Zyxel DX5401-B0 firmware allows a remote, unauthenticated attacker to read system files and recover the supervisor password from an encrypted file. The attack requires only network access to the device, with no authentication, no user interaction, and no special configuration.
The sensitive information exposure vulnerability in the CGI “Export_Log” and the binary “zcmd” in Zyxel DX5401-B0 firmware versions prior to V5.17(ABYO.1)C0 could allow a remote unauthenticated attacker to read the system files and to retrieve the password of the supervisor from the encrypted file.
- Exploited
- Yes, in VulnCheck KEV
- Reports
- 0
- Tactics
- 0/15
Exploitation timelineDated milestones for a CVE: when it was disclosed, when exploit code became public, when exploitation was confirmed, and when threat reports named it.
First seen exploited 7 months after disclosure. Public exploit code (Metasploit) was available 15 months before disclosure.
- Public exploit codeMetasploit15 mo before
- Disclosedday 0
- First seen exploitedVulnCheck KEV evidence+7 mo
MITRE ATT&CKA public catalogue of the techniques attackers use, maintained by MITRE. Patchfirst uses it to describe what attackers do with a vulnerability. techniques
No techniques linkedNo ATT&CK techniques are linked to this CVE yet. MITRE CTID has not mapped it, and no report passage in the corpus ties it to a technique.