Its routers ASUS contain a vulnerability that turns users into admins, according to security researcher Joshua Drake.
Routers could be exploited by malicious local users, but not by those on the wider network.network. After the intervention of the malicious user the router θα μπορούσε να στέλνει τους χρήστες του δικτύου που το χρησιμοποιούν σε κακόβουλες websites.
Drake says to a publication that many popular models such as RT-N66 and RT-AC66U are affected.
"Currently, all known versions of the firmware used in these routers are considered vulnerable," Drake said.
[tweet_embed id = 552292584450969600]
The wrong code that allows command execution is in the infosvr service, which runs as root and is listened on UDP port 9999. The service is designed, as Drake states, to simplify settings of the router by locating local routers.
Administrators should remove the remoting function from infosvr or shut down the service from their firewall, as their passwords to local networks they are not safe.
