Malwarecritical

Moobot botnet is back and targets vulnerable D

Security Affairsby @securityaffairsSep 7, 2022 · 07:59 UTC (Sep 7, 2022)2 min read1 · 1 read

Read at securityaffairs.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2021-36260 CVE-2015-2051 CVE-2018-6530 CVE-2022-26258 CVE-2022-28958

Tags: cve-2021-36260 cve-2015-2051 cve-2018-6530 cve-2022-26258 cve-2022-28958 malware

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2015-2051	Remote Command Execution via HNAP GetDeviceSettings in D-Link DIR-645 Router	—	97%	KEV	— KEV Feb 10, 2022
CVE-2018-6530	Unauthenticated OS Command Injection in D-Link DIR-860L/865L/868L/880L Routers	9.8	97%	KEVRansomwarePoC	Mar 6, 2018 KEV Sep 8, 2022
CVE-2021-36260	Unauthenticated Command Injection in Hikvision Device Web Server	9.8	100%	KEVPoC ×3	Sep 22, 2021 KEV Jan 10, 2022
CVE-2022-26258	Unauthenticated Remote Command Execution in D-Link DIR-820L Router	9.8	92%	KEVPoC ×2	Mar 28, 2022 KEV Sep 8, 2022
CVE-2022-28958	Rejected reason: DO NOT USE THIS CVE RECORD	—	—		May 18, 2022

From the original article

2 min read at securityaffairs.com

The Moobot botnet is behind a new wave of attacks that started in early August and that target vulnerable D-Link routers. Palo Alto Network’s Unit 42 researchers reported a new wave of attacks launched by the Moobot botnet that target vulnerable D-Link routers.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.