From: “SEC Consult Vulnerability Lab, Research via Fulldisclosure” <fulldisclosure () seclists org>
Date: Thu, 15 Dec 2022 12:59:08 +0000
Hi, earlier this year in February 2022, we published a technical security advisory - https://sec-consult.com/vulnerability-lab/advisory/multiple-critical-vulnerabilities-in-multiple-zyxel-devices/ - on different critical vulnerabilities in Zyxel devices, resulting from insecure coding practices and insecure configuration. Those also included a highly critical unauthenticated buffer overflow vulnerability in the proprietary Zyxel web server which allowed remote root access to the device. The only prerequisite for the attacker: network-level access to the web interface, e.g. via Internet or LAN/WiFi. We have just released a blog post giving an overview about the critical buffer overflow vulnerability on a higher level, a list of the affected devices (it seems there still exist vulnerable devices on the Internet). We have also developed a Metasploit module to verify whether the buffer overflow vulnerability can still be exploited on one's own affected device. Blog post: https://r.sec-consult.com/zyxsploit Metasploit module: https://r.sec-consult.com/metazyx Exploit video: https://youtu.be/hbF3LEljxSA ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ SEC Consult Vulnerability Lab SEC Consult, an Atos company Europe | Asia | North America About SEC Consult Vulnerability Lab The SEC Consult Vulnerability Lab is an integrated part of SEC Consult, an Atos company. It ensures the continued knowledge gain of SEC Consult in the field of network and application security to stay ahead of the attacker. The SEC Consult Vulnerability Lab supports high-quality penetration testing and the evaluation of new offensive and defensive technologies for our customers. Hence our customers obtain the most current information about vulnerabilities and valid recommendation about the risk profile of new technologies. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Interested to work with the experts of SEC Consult? Send us your application https://sec-consult.com/career/ Interested in improving your cyber security with the experts of SEC Consult? Contact our local offices https://sec-consult.com/contact/ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Mail: security-research at sec-consult dot com Web: https://www.sec-consult.com Blog: http://blog.sec-consult.com Twitter: https://twitter.com/sec_consult EOF / @2022 _______________________________________________ Sent through the Full Disclosure mailing list https://nmap.org/mailman/listinfo/fulldisclosure Web Archives & RSS: https://seclists.org/fulldisclosure/
Current thread:
- SEC Consult Vulnerability Lab publication: The enemy from within: Unauthenticated Buffer Overflows in Zyxel routers still haunting users & metasploit exploit SEC Consult Vulnerability Lab, Research via Fulldisclosure (Dec 20)
