TheMoon worm infects Linksys routers

TheMoon worm infects Linksys routers by exploiting an authentication bypass vulnerability in various models from the vendor’s E-Series product line.

“At this point, we are aware of a worm that is spreading among various models of Linksys routers,” said Johannes Ullrich, the chief technology officer at SANS ISC. “We do not have a definite list of routers that are vulnerable, but the following routers may be vulnerable depending on firmware version: E4200b (pictured at top), E3200, E3000, E2500, E2100L, E2000, E1550, E1500, E1200, E1000, E900.”