The many vulnerabilities Talos discovered in SOHO and industrial wireless routers post-VPNFilter
Summary: Since the 2018 VPNFilter malware, Cisco Talos has investigated 13 SOHO and industrial routers from various vendors and reported 289 CVEs across 141 Talos reports. The research covered devices including the ASUS RT-AX82-U, D-Link DIR-3040, InHand InRouter 302, Linksys E Series, Milesight UR32L, Netgear Orbi RBR750/RBS750 and Robustel R1510, with findings that included hard-coded credentials, hidden diagnostic and telnet activation paths, and vulnerabilities that could be chained for remote command execution.
What's compelling: These devices sit directly on the internet and pass all local network traffic, yet are often deployed without a security team to patch them - and Talos showed an attacker could reach root on the InHand InRouter 302 with a single click, a device three ATM providers said they used.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026