Its routers ASUS contain a vulnerability that turns users into admins, according to security researcher Joshua Drake.
Routers could be exploited by malicious local users, but not by those at large Internet. After the intervention of the malicious user the router could send the network users using it to malicious websites.
Drake says to a publication that many popular models such as RT-N66 and RT-AC66U are affected.
"Currently, all known versions of the firmware used in these routers are considered vulnerable," Drake said.
[tweet_embed id = 552292584450969600]
The mistake codeς που επιτρέπει την εκτέλεση εντολών βρίσκεται στην service infosvr, που τρέχει σαν root και είναι listened στην UDP door 9999. The service is designed, Drake says, to simplify router setup by locating local routers.
Administrators should remove the remote command execution feature from infosvr or close the service από το τείχος προστασίας τους, καθώς οι κωδικοί πρόσβασης τους σε τοπικά δίκτυα δεν είναι ασφαλείς.
