Hackers Love Four-Faith Routers: New Vulnerability Snafu Spurs Cyber Chaos
Threat actors are exploiting a vulnerability in Four-Faith industrial routers, warns VulnCheck. The flaw, CVE-2024-12856, lets attackers deploy a reverse shell by modifying system time settings. Approximately 15,000 routers are at risk, thanks to some handy default credentials. Remember, the only shell we want is at the beach, not in our routers!
Hot Take:
Four-Faith routers: Now featuring a complimentary reverse shell for those who love a bit of excitement with their internet connectivity. Remember folks, if it’s got a default password, it’s basically a hacker’s version of a free sample at the grocery store.
Key Points:
- Vulnerability CVE-2024-12856 in Four-Faith routers allows remote OS command injection.
- Flaw is present in models F3x24 and F3x36 with firmware version 2.0.
- Default credentials exacerbate the security risk, enabling unauthenticated attacks.
- Approximately 15,000 routers are potentially exposed to this vulnerability.
- VulnCheck has notified Four-Faith, but a patch release date remains unknown.
Already a member? Log in here