漏洞描述
zhttpd is vulnerable to unauthenticated local inclusion including privileged files such as /etc/shadow. An attacker can read all files on the system by using this endpoint.
影响产品
修复建议
建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。
参考链接
sec-consult.comhttps://sec-consult.com/blog/detail/enemy-within-unauthenticated-buffer-overflows-zyxel-routers/↗sec-consult.comhttps://sec-consult.com/vulnerability-lab/advisory/multiple-critical-vulnerabilities-in-multiple-zyxel-devices/↗github.comhttps://github.com/rapid7/metasploit-framework/pull/17388↗