Skip to content
NewA calmer, faster ZeroHour
Threat actorcriticalExploited in the wild

Threat actors attempt to exploit a flaw in Four

Security Affairsby @securityaffairs ()1 min read2
Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2019-12168
Four-Faith Wireless Mobile Router F3x24 v1.0 devices allow remote code execution via the Command Shell (aka Administration > Commands) screen
7.25%
CVE-2024-12856
OS Command Injection in Four-Faith F3x24/F3x36 Routers
7.284%PoC ×2

From the original article

1 min read at securityaffairs.com

VulnCheck researchers warn that threat actors are attempting to exploit a high-severity vulnerability impacting some Four-Faith routers. Cybersecurity firm VulnCheck warns that a high-severity flaw, tracked as CVE-2024-12856 (CVSS score: 7. 2), in Four-Faith routers is actively exploited in the wild.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.