The sensitive information exposure vulnerability in the CGI “Export_Log” and the binary “zcmd” in Zyxel DX5401-B0 firmware versions prior to V5.17(ABYO.1)C0 could allow a remote unauthenticated attacker to read the system files and to retrieve the password of the supervisor from the encrypted file.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Dx5401-b0_firmware | Zyxel | * | 5.17(abyo.1)c0 (excluding) |