NodeSphere
  • Communities
  • Create Post
  • Create Community
  • heart
    Support Lemmy
  • search
    Search
  • Login
  • Sign Up
digicat@infosec.pubM to blueteamsec@infosec.pubEnglish · 16 days ago

CVE-2025-54322 - XSpeeder (SXZOS) pre-auth RCE - Unauthenticated Root RCE affecting ~70,000+ Hosts - Xspeeder is a Chinese networking vendor known for edge devices like routers, SD-WAN appliances etc.

pwn.ai

external-link
message-square
0
link
fedilink
1
external-link

CVE-2025-54322 - XSpeeder (SXZOS) pre-auth RCE - Unauthenticated Root RCE affecting ~70,000+ Hosts - Xspeeder is a Chinese networking vendor known for edge devices like routers, SD-WAN appliances etc.

pwn.ai

digicat@infosec.pubM to blueteamsec@infosec.pubEnglish · 16 days ago
message-square
0
link
fedilink
CVE-2025-54322 (ZERODAY) - Unauthenticated Root RCE affecting ~70,000+ Hosts
pwn.ai
external-link
A critical zero-day vulnerability, CVE-2025-54322, has been discovered that enables Unauthenticated Root Remote Command Execution (RCE) in devices running Xspeeder's SXZOS firmware. These networking devices, primarily edge routers and SD-WAN appliances, are extensively used, resulting in an estimated 30,000+ hosts being publicly exposed to full system compromise. The vulnerability was autonomously discovered by the pwn.ai platform. This public disclosure follows six months of unsuccessful attempts to notify the vendor, Xspeeder. The technical findings reveal that the exploit bypasses several superficial defenses, including an Nginx user-agent check and a custom Django GateKeeper middleware that attempts to restrict access using a time-sensitive header nonce and session checks.
alert-triangle
You must log in or # to comment.

blueteamsec@infosec.pub

blueteamsec@infosec.pub

Subscribe from Remote Instance

Create a post
You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !blueteamsec@infosec.pub

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

Visibility: Public
globe

This community can be federated to other instances and be posted/commented in by their users.

  • 10 users / day
  • 57 users / week
  • 237 users / month
  • 237 users / 6 months
  • 1 local subscriber
  • 590 subscribers
  • 303 Posts
  • 20 Comments
  • Modlog
  • mods:
  • digicat@infosec.pub
  • UI: 0.19.12
  • BE: 0.19.15
  • Modlog
  • Instances
  • Docs
  • Code
  • join-lemmy.org