Almost immediately after being disclosed publicly, a vulnerability with routers running Arcadyan firmware has been exploited by hackers, potentially affecting millions of home routers.
Although this vulnerability was disclosed to router manufacturers in April, it was made public on August 3. There have been reports of hackers actively attacking these compromised routers since.
What is the issue?
The vulnerability, referred to as CVE-2021-20090, is a critical path traversal vulnerability in the web interfaces of routers with Arcadyan firmware. The vulnerability allows remote attackers to bypass authentication. This makes it possible for attackers to deploy Mirai botnet malicious payloads to affected devices.
Why should I be concerned?
This vulnerability can allow an unauthenticated remote attacker to take control of connected devices. Once this happens, the attacker can:
- Manipulate your internet traffic
- Gain access to sensitive information on your devices
- Alter router settings to make your network more vulnerable
Because not a lot of people are even aware of this security risk and people do not change their routers very frequently, this vulnerability presents a very serious problem for many.
How to check if your router is affected
Here is the list of confirmed devices affected by this vulnerability:
|Manufacturer||Device Model||Affected Firmware Version|
For more information, visit Tenable.
Secure Your Wi-Fi Router and Protect Your Home Network
Affected users should contact their respective vendors for update information and support. Ideally, a resolution will be available for all soon. However, this won’t stop hackers and threat actors from forever seeking new ways to compromise people’s security. To ensure your home network stays protected use Trend Micro Home Network Security.
The Home Network Security station is a device that connects to your home Wi-Fi router with an Ethernet cable. Once setup is complete, the station scans all traffic passing in and out of your home network, allowing it to prevent intrusions, block hacking attempts and web threats as well as protect your family’s privacy.
Home Network Security provides your home network with an essential extra layer of protection. Click the button below to learn more: