Newly identified botnet targets decade-old flaw in unpatched D
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2015-2051 | Remote Command Execution via HNAP GetDeviceSettings in D-Link DIR-645 Router | — | 97% | KEV | — KEV |
CVE-2024-3273+1 related CVE | Command Injection in D-Link DNS-320L, DNS-325, DNS-327L and DNS-340L NAS Devices | 9.8 | 100% | KEVPoC | KEV |
From the original article
1 min read at therecord.media
Researchers have discovered a new botnet, labeled Goldoon, that exploits a decade-old vulnerability in unpatched D-Link routers. The flaw — CVE-2015-2051 — “presents a low attack complexity,” but has a critical security impact that can allow intruders to run code remotely on infected hardware, according to a report from cybersecurity firm Fortinet.
therecord.media
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.