CVE-2023-38120: Adtran SR400ac ping Command Injection Remote Code Execution Vulnerability
Adtran SR400ac ping Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adtran SR400ac routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed.
The specific flaw exists within the ping command, which is available over JSON-RPC. A crafted host parameter can trigger execution of a system call composed from a user-supplied string. An attacker can leverage this vulnerability to execute code in the context of root. . Was ZDI-CAN-20525.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-38120?
CVE-2023-38120 has a high severity rating due to the potential for remote code execution on affected Adtran SR400ac devices.
How do I fix CVE-2023-38120?
To mitigate CVE-2023-38120, update your Adtran SR400ac router to the latest firmware version provided by Adtran.
Who is affected by CVE-2023-38120?
CVE-2023-38120 affects installations of the Adtran SR400ac routers that have not been patched.
Can CVE-2023-38120 be exploited without authentication?
No, CVE-2023-38120 requires authentication to exploit the vulnerability.
What kind of attack does CVE-2023-38120 enable?
CVE-2023-38120 enables remote attackers to execute arbitrary code on affected Adtran SR400ac routers.