EXPLOIT ASUSWRT 3.0.0.4.376_1071 LAN Backdoor Command Execution (CVE-2014-9583)

Rule ID

1130327

Severity

Critical

Description

A service called infosvr listens on port 9999 on the LAN bridge. this service contains a feature that allows an unauthenticated user on the LAN to execute commands.

Impact

Remote code execution

Recommendation

Update vendor's patch.

IPS Category

Exploits

IPS Anomaly Group

N/A

IPS Rule Default Action

Deny

References

Keywords

N/A