Tuesday, October 15, 2013

D-Link routers have serious vulnerability - Tech & Net

Vulnerability designated backdoor , was found in seven models different routers household, these routers that was manufactured by D-Link and Planex.

Basically

is a backdoor clandestine access, the source code of the router can be used to modify its settings, it is a very dangerous vulnerability and calling into question the safety and privacy of users (users).

backdoor, if used, permitee a hacker take full control of the router and can spy on all shipping activities of a house.

This vulnerability was discovered by security researcher Craig Heffner, who used to reverse engineer the software used to control the router D-Link DIR-100. The thorough analysis of the source code revealed a sequence of letters that are used in the correct manner, unlocks the remote access to the router.

Heffner wrote his findings in his blog and he mentioned that this sequence of letters was included in the routers to make it easier to access them, so the D-Link could remotely update some of its products, a so much easier. The same sequence was found to work in seven routers from D-Link (DIR-100, DI-524, DI-524UP, DI-604S, DI-604UP, DI -604 and TM-G5240) and two from Planex (BRL- 04UR and BRL-04CW).

It is believed that thousands of people bought these routers before being revealed as highly vulnerable.

In a statement, the D-Link said it was working with the investigator Heffner and other security researchers to learn more about the backdoor and also to check if the same problem exists in other models. The company added that soon will produce an update to the software that keeps the active routers (firmware) that would address this vulnerability. It is hoped that this update comes at the end of this month.

asked D-Link users (users) to be vigilant and disabling remote access of their routers, so your data stays secure. With regard to the company Planex, has not yet issued any statement about their products.

Source: BBC

No comments:

Post a Comment