Vulnerabilitycritical
China-Linked Operation “WrtHug” Hijacks Thousands of ASUS Routers
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2023-39780 | Authenticated OS Command Injection in ASUS RT-AX55 Routers | 8.8 | 40% | KEVPoC ×7 | KEV |
CVE-2023-41345+3 related CVEs | ASUS RT-AX55’s authentication-related function has a vulnerability of insufficient filtering of special characters within its token-generated module | 8.8 | 1% | ||
| CVE-2024-12912 | An improper input insertion vulnerability in AiCloud on certain router models may lead to arbitrary command execution | 7.2 | 1% | ||
| CVE-2025-2492 | An improper authentication control vulnerability exists in AiCloud | 9.2 | 1% |
From the original article
2 min read at infosecurity-magazine.com
A new China-linked threat campaign has already compromised thousands of ASUS WRT routers around the world in a bid to build a new espionage network, SecurityScorecard has warned. The firm’s STRIKE team claimed in a new report today that Operation “WrtHug” exploits six mainly legacy vulnerabilities in order to gain elevated privileges on end-of-life SOHO devices.
By Phil Muncaster · infosecurity-magazine.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.