Security Advisory

CVE-2023-28770

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2023-04-27 00:00:00
Last updated 2025-01-31 18:42:32
Assigner Zyxel
State PUBLISHED

Description

The sensitive information exposure vulnerability in the CGI “Export_Log” and the binary “zcmd” in Zyxel DX5401-B0 firmware versions prior to V5.17(ABYO.1)C0 could allow a remote unauthenticated attacker to read the system files and to retrieve the password of the supervisor from the encrypted file.