Security News > 2021 > August > Auth Bypass Bug Exploited, Affecting Millions of Routers

An authentication-bypass vulnerability affecting multiple routers and internet-of-things devices is being actively exploited in the wild, according to researchers.

"The attacker seems to be attempting to deploy a Mirai variant on the affected routers."

Cleaving close to Tenable's PoC, the attackers are modifying the configuration of the attacked device to enable Telnet using "ARC SYS TelnetdEnable=1" to take control, according to Juniper.

Mirai is a long-running botnet that infects connected devices and can be used to mount distributed denial-of-service attacks.

The attackers have been continuously adding new exploits to its arsenal, according to the posting, and CVE-2021-20090 is unlikely to be the last.

"Whenever an exploit PoC is published, it often takes them very little time to integrate it into their platform and launch attacks."

News URL

https://threatpost.com/auth-bypass-bug-routers-exploited/168491/