Vulnerability Spotlight: SNIProxy contains remote code execution vulnerability
Summary: Cisco Talos discovered a remote code execution vulnerability (TALOS-2023-1731 / CVE-2023-25076) in the open-source SNIProxy tool that occurs when wildcard backend hosts are used in its configuration. An attacker could send a specially crafted HTTP or TLS packet to the target machine, potentially causing a denial of service or gaining remote code execution, and Talos confirmed SNIProxy version 0.6.0-2 and SNIProxy Master version 822bb80df9b7b345cc9eba55df74a07b498819ba are exploitable.
Key Takeaway: SNIProxy proxies HTTPS by hostname without decrypting traffic or needing a key or certificate, so a tool placed to avoid handling secrets is the one an attacker can reach with a single crafted packet to run code.
Read the original at Cisco Talos ↗
- Topics
- Endpoint & Network Security
- Mentions
- CVE-2023-25076
- Related
- Adapting to AI penetration testing orchestrators: The Modern Security Model Cyber Risks · Nov 13, 2026Introducing Spend Management: Spending limits and alerts for Cloudflare Cyber Risks · Nov 13, 2026Choosing Que Paxa, an unusual consensus algorithm Cyber Risks · Nov 11, 2026