Malwarecritical

Andoryu Botnet Exploits Critical Ruckus Wireless Flaw for Widespread Attack

The Hacker Newsby @TheHackersNewsMay 11, 2023 · 07:05 UTC (May 11, 2023)2 min read2

Read at thehackernews.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2023-25717 CVE-2021-22205

Tags: cve-2023-25717 cve-2021-22205 malware

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2021-22205	Unauthenticated RCE in GitLab CE/EE via ExifTool Image Parsing (CVE-2021-22205)	10.0	100%	KEVRansomwarePoC ×2	Apr 23, 2021 KEV Nov 3, 2021
CVE-2023-25717	Unauthenticated RCE via Command Injection in Ruckus Wireless Admin ≤10.4	9.8	98%	KEVPoC	Feb 13, 2023 KEV May 12, 2023

From the original article

2 min read at thehackernews.com

 Ravie Lakshmanan  May 11, 2023 Endpoint Security / Cyber Threat A nascent botnet called Andoryu has been found to exploit a now-patched critical security flaw in the Ruckus Wireless Admin panel to break into vulnerable devices. The flaw , tracked as CVE-2023-25717 (CVSS score: 9.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.