Threats tagged 'ghsa-5h9g-3hw3-h234'

Cudy TR3000 routers with firmware versions before 2.5.42 have a remote code execution vulnerability. This flaw allows unauthenticated attackers on the adjacent network segment to execute root commands by advertising a rogue automesh controller via mDNS. The attack involves advertising _cudycmagent._tcp records that point to a malicious MQTT broker and sending commands encrypted with a fixed AES key, which the router executes with root privileges.