Linksys

Linksys smart Wi-Fi routers suffered a data breach incident because of a vulnerability in its site and 7,000 vulnerable devices exposed.

Two of the vulnerabilities were used by an unauthenticated actor to cause a denial of service (DoS) and make the router unavailable.

Users were unable to connect to the network and administrators are unable to use the web interface of the router until the attacker stops their attack.

Source: https://grahamcluley.com/got-one-20-linksys-smart-wi-fi-routers-bad-news-10-security-vulnerabilities-discovered/

TPRM report: https://scoringcyber.rankiteo.com/company/linksys

"id": "lin05810922",
"linkid": "linksys",
"type": "Vulnerability",
"date": "04/2017",
"severity": "50",
"impact": "2",
"explanation": "Attack limited on finance or reputation"

{'affected_entities': [{'industry': 'Technology',
                        'name': 'Linksys',
                        'type': 'Company'}],
 'attack_vector': 'Vulnerability Exploitation',
 'description': 'Linksys smart Wi-Fi routers suffered a data breach incident '
                'because of a vulnerability in its site and 7,000 vulnerable '
                'devices exposed. Two of the vulnerabilities were used by an '
                'unauthenticated actor to cause a denial of service (DoS) and '
                'make the router unavailable. Users were unable to connect to '
                'the network and administrators are unable to use the web '
                'interface of the router until the attacker stops their '
                'attack.',
 'impact': {'downtime': 'Network unavailable until attack stops',
            'operational_impact': 'Users unable to connect to the network and '
                                  'administrators unable to use the web '
                                  'interface',
            'systems_affected': '7,000 vulnerable devices'},
 'threat_actor': 'Unauthenticated Actor',
 'title': 'Linksys Smart Wi-Fi Routers Data Breach',
 'type': 'Data Breach, Denial of Service (DoS)',
 'vulnerability_exploited': ['Denial of Service (DoS)']}