Active Mirai Botnet Variant Exploiting Zyxel Devices for DDoS Attacks

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a recently patched critical security flaw in Zyxel gear to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation.
Tracked as CVE-2023-28771 (CVSS score: 9.8), the issue relates to a command injection flaw impacting different firewall models that could enable an unauthenticated attacker

agency attacks botnet catalog cisa command command injection critical cve cve-2023-28771 cvss cybersecurity ddos ddos attacks devices exploitation exploited exploiting firewall flaw gear infrastructure infrastructure security injection issue kev known exploited vulnerabilities mirai mirai botnet score security vulnerabilities zyxel