CVE-2021-36260

Vulnerability updated 22 days ago (2024-11-29T14:36:32.393Z)
Download STIX
Preview STIX
CVE-2021-36260 is a critical command injection flaw found in the webserver of various Hikvision products. This vulnerability, a defect in software design or implementation, allows unauthorized users to execute arbitrary commands on the system, potentially leading to unauthorized access, data theft, or other malicious activities. The flaw was identified and disclosed in 2021, becoming a significant concern for cybersecurity professionals due to its potential for exploitation. The Mirai-based Moobot botnet, initially documented by Palo Alto Unit 42 researchers in February 2021, began exploiting this vulnerability in November 2021. Moobot, a variant of the infamous Mirai malware, targets Internet of Things (IoT) devices, converting them into bots that can be used for large-scale network attacks. The exploitation of CVE-2021-36260 allowed the botnet to gain control over affected Hikvision devices, further expanding its reach and impact. The exploitation of CVE-2021-36260 by the Moobot botnet underscores the importance of regular software updates and robust cybersecurity measures. Hikvision device users were urged to apply patches and updates promptly to mitigate the risk posed by this vulnerability. Overall, this case highlights the ongoing threats posed by botnets and the need for continuous vigilance in identifying and addressing software vulnerabilities.
Description last updated: 2024-05-04T21:49:04.420Z
What's your take? (Question 1 of 3)
Help tune the shared Cybergeist dataset, assist your peers, and earn karma. Expand the panel to get started.
Aliases We are not currently tracking any aliases
Miscellaneous Associations
Other elements of context that could aid in the identification of relevance
Botnet
Vulnerability
Analyst Notes & Discussion
Be the first to leave your mark here! Log in to share your views and vote.
Associated Malware
To see the evidence that has resulted in these malware associations, create a free account
Alias DescriptionAssociation TypeVotes
The Moobot Malware is associated with CVE-2021-36260. Moobot is a malicious software (malware) that is based on the Mirai platform. This malware was designed to infiltrate devices and systems, often through suspicious downloads, emails, or websites without user knowledge. Once inside a system, Moobot facilitated targeted attacks against various entitieUnspecified
2
The Mirai Malware is associated with CVE-2021-36260. Mirai is a type of malware that primarily targets Internet of Things (IoT) devices, converting them into a botnet, which is then used to launch Distributed Denial of Service (DDoS) attacks. In early 2022, Mirai botnets accounted for over seven million detections worldwide, though there was a 9% quarUnspecified
2
Source Document References
Information about the CVE-2021-36260 Vulnerability was read from the documents corpus below. This display is limited to 20 results, create a free account to see more