FOUR-FAITH INDUSTRIAL ROUTER CVE-2024-12856 EXPLOITED IN THE WILD

Summary from the TLDR InfoSec newsletter

A new post-authentication vulnerability in Four-Faith industrial routers, CVE-2024-12856, is being exploited in the wild. Using default credentials for remote command injection, the attack targets specific router models over HTTP, allowing attackers to execute commands on vulnerable devices. VulnCheck has notified Four-Faith and customers about the issue and recommends contacting Four-Faith for information on patches and affected models.