ZDI-23-1766: Extreme Networks AP410C ah_webui Missing Authentication for Critical Function Remote Code Execution Vulnerability

Published Dec 12, 2023
·
Updated

This vulnerability allows network-adjacent attackers to reach critical functions on affected installations of Extreme Networks AP410C routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the ahwebui service, which listens on TCP port 3009 by default. The issue results from the lack of authentication prior to allowing access to functionality. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code within the context of root.

Other sources

This vulnerability allows network-adjacent attackers to reach critical functions on affected installations of Extreme Networks AP410C routers. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2023-46271.

Affected Software

2 affected components
Extreme Networks AP410C
Extreme Networks AP410C

Event History

Dec 12, 2023
Advisory Published
06:00 AM
Data Sourced
06:00 AM
Description
Feb 20, 2025
Advisory Published
via ZDI·05:44 AM

Frequently Asked Questions

1

What is the severity of ZDI-23-1766?

The severity of ZDI-23-1766 is critical due to the lack of authentication required to exploit this vulnerability.

2

How do I fix ZDI-23-1766?

To fix ZDI-23-1766, update the firmware of your Extreme Networks AP410C to the latest version provided by the vendor.

3

Who is affected by ZDI-23-1766?

ZDI-23-1766 affects installations of Extreme Networks AP410C routers.

4

What type of attacks does ZDI-23-1766 allow?

ZDI-23-1766 allows network-adjacent attackers to access critical functions on the affected routers.

5

What component is vulnerable in ZDI-23-1766?

The vulnerability exists within the ah_webui service that listens on TCP port on the affected devices.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203