Over 485,000 Ubiquiti devices vulnerable to new attack

guest · Feb 4, 2019

Over 485,000 Ubiquiti devices vulnerable to new attack
Ubiquiti devices could be exploited to launch DDoS attack. Exploitation attempts detected
February 4, 2019
https://www.zdnet.com/article/over-485000-ubiquiti-devices-vulnerable-to-new-attack/

Ubiquiti Networks is working on a fix for a newly discovered security issue affecting its devices that attackers have been exploiting since July last year.
The issue impacts over 485,000 devices, according to an internet scan conducted by US cyber-security firm Rapid7.

Troutman said threat actors have been using a service running on port 10,001 on Ubiquiti devices to carry out weak DDoS amplification attacks.
ATTACKS HAPPENING ON PORT 10,001
In a security alert published by Rapid7, senior security researcher Jon Hart explained that attackers are exploiting a "discovery service" running on port 10,001, which Ubiquiti Networks included in its devices so the company and internet service providers (ISPs) can use it to find Ubiquiti equipment on the internet and in closed networks.

Also as a side effect, as an attacker is trying to use this service for DDoS attacks, remote access to the device via its SSH service is also cut out.
Click to expand...

Log in or Sign up

Over 485,000 Ubiquiti devices vulnerable to new attack

guest Guest

Log in or Sign up

Over 485,000 Ubiquiti devices vulnerable to new attack

guest Guest

Useful Searches