Malwarehigh

New Mozi P2P Botnet targets Netgear, D-Link, Huawei routers

Security Affairsby @securityaffairsDec 25, 2019 · 22:10 UTC (Dec 25, 2019)2 min read3 · 1 read

Read at securityaffairs.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2014-8361 CVE-2017-17215 CVE-2018-10561 CVE-2018-10562

Tags: cve-2014-8361 cve-2017-17215 cve-2018-10561 cve-2018-10562 malware

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2014-8361	Improper Input Validation in Realtek SDK miniigd SOAP Service Enables Remote RCE	—	100%	KEV	— KEV Sep 18, 2023
CVE-2017-17215	Huawei HG532 with some customized versions has a remote code execution vulnerability	8.8	78%		Mar 20, 2018
CVE-2018-10562 +1 related CVE CVE-2018-10561	Unauthenticated RCE in Dasan GPON Routers (CVE-2018-10562)	9.8	100%	KEVRansomwarePoC ×2	May 4, 2018 KEV Mar 31, 2022

From the original article

2 min read at securityaffairs.com

A new Mozi P2P botnet is actively targeting Netgear, D-Link, and Huawei routers by probing for weak Telnet passwords to compromise them. Security experts from 360 Netlab spotted a new Mozi P2P botnet that is actively targeting Netgear, D-Link, and Huawei routers by probing for weak Telnet passwords to compromise them.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.