T-Mobile - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/vendors/t-mobile/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioSat, 31 Oct 2026 00:04:26 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgASUSWRT infosvr: pre-authentication remote code execution (CVE-2014-9583)https://feed.craftedsignal.io/briefs/2026-10-cve-2014-9583-asuswrt/Sat, 31 Oct 2026 00:04:26 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-10-cve-2014-9583-asuswrt/An authentication bypass vulnerability in the ASUSWRT infosvr daemon allows unauthenticated remote attackers to execute arbitrary system commands with root privileges via UDP port 9999.CVE-2014-9583 is a pre-authentication remote code execution vulnerability affecting the ASUSWRT infosvr daemon. The daemon listens on UDP port 9999 and processes IBOX_COMM_PKT_HDR_EX packets. Due to insufficient authentication checks, the daemon fails to validate the MAC address or password field provided in the packet header. An attacker can supply a crafted packet with OpCode 0x33 (NET_CMD_ID_MANU_CMD) to trigger command injection, resulting in execution as the root user.

Impact

Successful exploitation allows for full control of the affected router, including root command execution. The source notes that this vulnerability has been historically leveraged by IoT botnets to compromise ASUS and T-Mobile networking equipment.

Recommendation

  • Immediately block all ingress UDP traffic to port 9999 on WAN-facing interfaces.
  • Update ASUSWRT firmware to the latest version, if available; for EOL models, replace the firmware with a secure, supported alternative.
  • Disable UPnP and remote management features if they are not strictly required for network operations.
  • Reset administrative passwords to mitigate secondary impact if the device was previously compromised.
]]>criticaladvisoryvulnerabilityrceiotcve-2014-9583