Critical Exploitation of Four-Faith Routers in Botnet Campaign

• •Four-Faith industrial routers are targeted due to CVE-2024-9643, a critical flaw.
• •Exploitation attempts have surged, indicating a transition to large-scale botnet operations.
• •Organizations using affected routers must take immediate action to mitigate risks.

Four-Faith industrial cellular routers are under active attack due to a critical authentication bypass vulnerability, CVE-2024-9643, published on February 4, 2025. Security researchers report a significant increase in exploitation attempts, indicating a shift from probing to large-scale hijacking of these devices for botnet creation. The vulnerability primarily affects Four-Faith F3x36 industrial routers, which are being rapidly weaponized by attackers. This campaign poses a serious risk to industrial infrastructure, as compromised routers can be repurposed for malicious activities. The ongoing exploitation highlights the urgent need for organizations using these devices to implement security measures and monitor for suspicious activity.