Skip to content
NewA calmer, faster ZeroHour
VulnerabilityhighExploited in the wild

Ballista Botnet Exploits Unpatched TP-Link Vulnerability, Targets Over 6,000 Devices

The Hacker Newsby @TheHackersNews ()2 min read1 · 1 read
Analyze CVE-2023-1389 with Vani AIImpact, affected versions, exploitation, mitigations and detection

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2023-1389
Command Injection in TP-Link Archer AX21 Router Allows Remote Code Execution
8.8100%KEVPoC ×2
KEV

From the original article

2 min read at thehackernews.com

 Ravie Lakshmanan  Mar 11, 2025 Network Security / Vulnerability Unpatched TP-Link Archer routers have become the target of a new botnet campaign dubbed Ballista, according to new findings from the Cato CTRL team.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.