Data breachcritical
China-linked threat actors have breached telcos and network service providers
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2017-6862 | Buffer Overflow in Multiple NETGEAR Devices Allows Auth Bypass and RCE | 9.8 | 46% | KEV | KEV |
| CVE-2018-0171 | Unauthenticated RCE/DoS in Cisco IOS & IOS XE Smart Install | 9.8 | 99% | KEV | KEV |
| CVE-2018-13382 | Unauthenticated SSL VPN Account-Takeover Flaw in Fortinet FortiOS and FortiProxy | 7.5 | 82% | KEVRansomware | KEV |
| CVE-2018-14847 | Directory Traversal in MikroTik RouterOS Winbox Interface (Unauthenticated File Read) | 9.1 | 96% | KEVPoC ×7 | KEV |
| CVE-2019-11510 | Unauthenticated Arbitrary File Read in Ivanti Pulse Connect Secure VPN | 10.0 | 100% | KEVRansomwarePoC ×2 | KEV |
| CVE-2019-15271 | Authenticated Deserialization RCE in Cisco RV016/RV042/RV042G/RV082 Routers | 8.8 | 5% | KEV | KEV |
| CVE-2019-1652 | Authenticated Command Injection in Cisco RV320/RV3325 Small Business Routers | 7.2 | 96% | KEVPoC ×5 | KEV |
| CVE-2019-16920 | Command Injection in Multiple D-Link Routers Enables Full Device Compromise | 9.8 | 100% | KEVPoC ×2 | KEV |
| CVE-2019-19781 | Unauthenticated path traversal RCE in Citrix ADC, Gateway, and SD-WAN WANOP | 9.8 | 100% | KEVRansomware | KEV |
CVE-2019-7195+2 related CVEs | Path Traversal in QNAP Photo Station Enables Unauthenticated RCE | 9.8 | 89% | KEVRansomwarePoC | KEV |
| CVE-2019-7193 | Unauthenticated Remote Code Execution in QNAP QTS via Improper Input Validation | 9.8 | 14% | KEVRansomwarePoC | KEV |
| CVE-2020-29583 | Hard-Coded 'zyfwp' Admin Backdoor in Zyxel USG Firewall Firmware 4.60 | 9.8 | 90% | KEVPoC | KEV |
| CVE-2020-8515 | Unauthenticated Command Injection RCE in DrayTek Vigor3900/2960/300B Routers | 9.8 | 100% | KEVPoC | KEV |
| CVE-2021-22893 | Use-After-Free RCE in Ivanti Pulse Connect Secure License Services | 10.0 | 47% | KEVRansomware | KEV |
From the original article
3 min read at securityaffairs.com
China-linked threat actors have breached telecommunications companies and network service providers to spy on the traffic and steal data. US NSA, CISA, and the FBI published a joint cybersecurity advisory to warn that China-linked threat actors have breached telecommunications companies and network service providers.
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.