Exploit / PoCcritical
China-linked APT UNC3886 targets EoL Juniper routers
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2022-41328 | Path Traversal in Fortinet FortiOS Exploited in Targeted Attacks | 7.1 | 11% | KEV | KEV |
| CVE-2025-21590 | Kernel Code Injection Flaw in Juniper Junos OS Exploited in the Wild | 6.7 | 2% | KEV | KEV |
From the original article
3 min read at securityaffairs.comMandiant researchers warn that China-linked actors are deploying custom backdoors on Juniper Networks Junos OS MX routers. In mid-2024, Mandiant identified custom backdoors on Juniper Networks’ Junos OS routers, and attributed the attacks to a China-linked espionage group tracked as UNC3886. These TINYSHELL -based backdoors had various capabilities, including active and passive access and a script to disable logging.
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.