Trinity Cyber + Grey Noise: Sharing Intelligence to Protect Internet Citizens

Summary: Trinity Cyber's Threat Analysis team gave GreyNoise evidence of exploitation for CVE-2023-1389, a command injection vulnerability in TP-Link Archer AX21 firmware, and GreyNoise deployed a detection tag in under two hours. Trinity Cyber then supplied evidence for five more CVEs, which GreyNoise tagged and published to all its users this week.
Bottom line: A command injection flaw in TP-Link Archer AX21 firmware was being exploited in the wild, and the gap between a partner's evidence and a working detection tag was under two hours - the measure of how fast your own vulnerability intelligence turns into coverage.

Read the original at GreyNoise Blog ↗

Topics: Zero-Days & Exploits
Mentions: CVE-2023-1389
Related: Grey Noise and Trinity Cyber have observed active exploitation attempts using weaknesses found in CVE-2023-1389 against TP-Link Archer gigabit routers. The blog post provides information about a new Grey Noise tag for this activity as well as details on the exploit attempt and how organizations can keep themselves safe from harm. Cyber Risks ·
CVE-2023-1389: TP-Link Archer AX-21 Command Injection Vulnerability Known Exploited Vulnerabilities · May 01, 2023
Anti-DDoS Firm Heaped Attacks on Brazilian ISPs Cyber Risks ·