Huawei zero-day attack behind last year’s crash of Luxembourg's entire telecoms network

Key Points:

• A zero-day vulnerability in Huawei enterprise router software caused a nationwide telecom outage in Luxembourg, disrupting critical communications for over three hours.
• The attack exploited undocumented behavior in the routers, leading to continuous restart loops and affecting mobile, landline, and emergency services. No CVE has been issued for this vulnerability, leaving other operators potentially at risk.
• Immediate actions include reviewing network configurations for Huawei devices and monitoring for unusual traffic patterns that could indicate similar exploitation attempts.

Technical Details: The attack involved specially crafted network traffic targeting Huawei routers, resulting in denial-of-service conditions. Previous vulnerabilities (CVE-2021-22359 and CVE-2022-29798) were noted but not related to this incident.

MITRE ATT&CK Techniques:

• None mentioned

IOCs Mentioned:

• None mentioned