Mukashi: A New Mirai IoT Botnet Variant Targeting Zyxel NAS Devices

🗓️ 21 Mar 2020 07:51:00Reported by The Hacker NewsType

Mukashi is a Mirai variant exploiting CVE-2020-9054 in Zyxel NAS devices to create a DDoS botnet.

Reporter	Title	Published	Views	Family All 30
GithubExploit	Exploit for CVE-2014-8361	31 Mar 202611:18	–	githubexploit
ATTACKERKB	VU#498544 ZyXEL pre-authentication command injection in weblogin.cgi	26 Feb 202000:00	–	attackerkb
ATTACKERKB	CVE-2020-9054	20 Feb 202000:00	–	attackerkb
BDU FSTEC	The vulnerability of the weblogin.cgi component in NAS (Network Attached Storage) storage systems and micro-programming software for Ethernet interfaces of UTM, ATP, and VPN devices allows a hacker to execute arbitrary code.	20 Mar 202000:00	–	bdu_fstec
Circl	CVE-2020-9054	26 Feb 202010:20	–	circl
CISA KEV Catalog	Zyxel Multiple NAS Devices OS Command Injection Vulnerability	25 Mar 202200:00	–	cisa_kev
Check Point Advisories	ZyXEL NAS Command Injection (CVE-2020-9054)	26 Feb 202000:00	–	checkpoint_advisories
CVE	CVE-2020-9054	4 Mar 202019:30	–	cve
Cvelist	CVE-2020-9054 ZyXEL NAS products running firmware version 5.21 and earlier are vulnerable to pre-authentication command injection in weblogin.cgi	4 Mar 202019:30	–	cvelist
Krebs on Security	Zyxel Fixes 0day in Network Storage Devices	24 Feb 202017:13	–	krebs