Akamai SIRT Security Advisory: CVE-2023-26801 Exploited to Spread Mirai Botnet Malware

...

CVE-2023-26801

creationtimestamp| type| source ---|---|--- 2023-03-27 00:39:20+00:00| seen| https://t.me/cibsecurity/60763 2023-05-26 16:50:05+00:00| seen| https://t.me/truesecator/4428 2023-07-12 13:01:49+00:00| seen| MISP/d1468160-fde0-4647-9b90-2fd4be8c85b2 2024-01-08 18:40:02+00:00| seen|...

CVE-2023-26801

LB-LINK BL-AC19002.0 v1.0.1, LB-LINK BL-WR9000 v2.4.9, LB-LINK BL-X26 v1.2.5, and LB-LINK BL-LTE300 v1.0.8 were discovered to contain a command injection vulnerability via the mac, time1, and time2 parameters at /goform/setLimitClientcfg...

CVE-2023-26801

LB-LINK BL-AC19002.0 v1.0.1, LB-LINK BL-WR9000 v2.4.9, LB-LINK BL-X26 v1.2.5, and LB-LINK BL-LTE300 v1.0.8 were discovered to contain a command injection vulnerability via the mac, time1, and time2 parameters at /goform/setLimitClientcfg. Recent assessments: Assessed Attacker Value: 0 Assessed...

CVE-2023-26801

LB-LINK BL-AC19002.0 v1.0.1, LB-LINK BL-WR9000 v2.4.9, LB-LINK BL-X26 v1.2.5, and LB-LINK BL-LTE300 v1.0.8 were discovered to contain a command injection vulnerability via the mac, time1, and time2 parameters at /goform/setLimitClientcfg...

CVE-2023-26801

CVE-2023-26801 affects LB-LINK BL-AC1900_2.0 v1.0.1, BL-WR9000 v2.4.9, BL-X26 v1.2.5, and BL-LTE300 v1.0.8. The vulnerability is a command injection via the mac, time1, and time2 parameters in /goform/set_LimitClient_cfg. Root cause involves improper input handling in the /goform/set_LimitClient_...