CVE-2021-20090 actively exploited to target millions of IoT devices
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2020-29557 | Pre-Authentication Buffer Overflow RCE in D-Link DIR-825 R1 Routers | 9.8 | 56% | KEVPoC | KEV |
CVE-2021-1498+1 related CVE | Command Injection in Cisco HyperFlex HX Data Platform / Installer VM | 9.8 | 100% | KEVPoC | KEV |
| CVE-2021-20090 | Unauthenticated Path Traversal in Arcadyan Buffalo Router Firmware | 9.8 | 100% | KEVPoC ×2 | KEV |
| CVE-2021-22502 | Unauthenticated Command Injection RCE in Micro Focus Operation Bridge Reporter | 9.8 | 97% | KEVPoC | KEV |
| CVE-2021-22506 | Information Disclosure via SAML ACS Redirect in Micro Focus Access Manager | 7.5 | 26% | KEV | KEV |
| CVE-2021-31755 | Unauthenticated Stack Overflow RCE in Tenda AC11 Router via /goform/setmac | 9.8 | 87% | KEVPoC | KEV |
From the original article
2 min read at securityaffairs.com
Threat actors are actively exploiting a critical authentication bypass issue (CVE-2021-20090 ) affecting home routers with Arcadyan firmware. Threat actors actively exploit a critical authentication bypass vulnerability, tracked as CVE-2021-20090 , impacting home routers with Arcadyan firmware to deploy a Mirai bot. “A path traversal vulnerability in the web interfaces of Buffalo WSR-2533DHPL2 firmware version <= 1.
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.