Exploit / PoCcritical
Hackers Exploiting New Auth Bypass Bug Affecting Millions of Arcadyan Routers
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2020-29557 | Pre-Authentication Buffer Overflow RCE in D-Link DIR-825 R1 Routers | 9.8 | 56% | KEVPoC | KEV |
CVE-2021-1498+1 related CVE | Command Injection in Cisco HyperFlex HX Data Platform / Installer VM | 9.8 | 100% | KEVPoC | KEV |
| CVE-2021-20090 | Unauthenticated Path Traversal in Arcadyan Buffalo Router Firmware | 9.8 | 100% | KEVPoC ×2 | KEV |
| CVE-2021-22502 | Unauthenticated Command Injection RCE in Micro Focus Operation Bridge Reporter | 9.8 | 97% | KEVPoC | KEV |
| CVE-2021-22506 | Information Disclosure via SAML ACS Redirect in Micro Focus Access Manager | 7.5 | 26% | KEV | KEV |
| CVE-2021-31755 | Unauthenticated Stack Overflow RCE in Tenda AC11 Router via /goform/setmac | 9.8 | 87% | KEVPoC | KEV |
From the original article
2 min read at thehackernews.com
Unidentified threat actors are actively exploiting a critical authentication bypass vulnerability to hijack home routers as part of an effort to co-opt them to a Mirai-variant botnet used for carrying out DDoS attacks, merely two days after its public disclosure. Tracked as CVE-2021-20090 (CVSS score: 9.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.