Find the helpers

Summary: Cisco Talos discovered 44 vulnerabilities and 63 CVEs across ten .cgi and three .sh files, plus the static login page, of the Wavlink AC3000 wireless router web application. An attacker can send specially crafted network packets over WAN to gain root access to the router via the wcrtrl service and static login credentials.
What you should know: The Wavlink AC3000 is one of the most popular gigabit routers in the US, and root access over WAN puts that installed base in reach during ongoing state-sponsored attacks on infrastructure.

Read the original at Cisco Talos ↗

Topics: Malware
Mentions: CVE-2024-12686
Related: CVE-2024-12686: Beyond Trust Privileged Remote Access (PRA) and Remote Support (RS) OS Command Injection Vulnerability Known Exploited Vulnerabilities · Jan 13, 2025
ARTEX and beyond: AI-enabled penetration testing platforms Cyber Risks · Nov 13, 2026
Fake GTA 6 download goes after Steam logins and crypto wallet data Cyber Risks · Nov 13, 2026