d3Xt3r, 1 month ago (edited 1 month ago) From what I’ve heard so far, it’s NOT an authentication bypass, but a gated remote code execution. There’s some discussion on that here: bsky.app/profile/…/3kowjkx2njy2b But it would be nice to have a similar digram like OP’s to understand how exactly it does the RCE and implements the SSH backdoor. If we understand how, maybe we can take measures to prevent similar exploits in the future.
From what I’ve heard so far, it’s NOT an authentication bypass, but a gated remote code execution.
There’s some discussion on that here: bsky.app/profile/…/3kowjkx2njy2b
But it would be nice to have a similar digram like OP’s to understand how exactly it does the RCE and implements the SSH backdoor. If we understand how, maybe we can take measures to prevent similar exploits in the future.