Malwaremedium
TP-Link routers under attack from Dark.IoT botnet
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2021-41653 | The PING function on the TP-Link TL-WR840N EU v5 router with firmware through TL-WR840N(EU)_V5_171211 is vulnerable to remote code execution via a crafted… | 9.8 | 76% | PoC |
From the original article
2 min read at therecord.media
The operators of a botnet known as Manga, Dark Mirai, and Dark. IoT are currently abusing a recently disclosed vulnerability to hijack TP-Link routers and add them to their network of hacked devices. The attacks, which began around two weeks ago, are abusing a vulnerability tracked as CVE-2021-41653 , disclosed by Hungarian security researcher Matek Kamilló at the start of November.
therecord.media
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.