Our takeCISA reports active exploitation of multiple vulnerabilities in the Ebyte NE2-D11 industrial wireless module (firmware FW-9167-0-11) that let attackers gain admin access, leak data, alter configs, hijack sessions, or disrupt operation. Patch immediately if you run these devices.Cyber Resilience desk
Sources (1)
- cisa_ics · cisa_ics
What this means for you — Security leader:CISA reports active exploitation of multiple vulnerabilities in the Ebyte NE2-D11 industrial wireless module (firmware FW-9167-0-11) that can yield admin access, config changes, session hijacking, and device disruption. Review OT/ICS inventory immediately; isolate or patch affected units and monitor for unauthorized access.
What this means for you — Lean IT orgs:If you use Ebyte NE2-D11 wireless modules in any equipment, check the firmware version right now. Update or isolate the device if it is running FW-9167-0-11, because attackers are actively exploiting it.
What this means for you — MSP:CISA reports active exploitation in Ebyte NE2-D11 (firmware FW-9167-0-11). Scan client OT/ICS inventories for this module; prioritize patching or network isolation where found and watch for signs of admin access or configuration tampering.
What this means for you — Researcher:CISA confirms active exploitation of vulnerabilities in the Ebyte NE2-D11 (FW-9167-0-11) that enable unauthorized admin access, information disclosure, config modification, session hijacking, and device disruption.