Wednesday, January 30, 2013

Broadcom UPnP Remote Preauth Root Code Execution Vulnerability


During the security evaluation of Cisco Linksys routers for a client, we have discovered a critical
security vulnerability that allows remote unauthenticated attacker to remotely execute arbitrary code
under root privileges.
Upon initial vulnerability announcement a few weeks ago Cisco spokesman stated that only one router
model is vulnerable - WRT54GL.
We have continued with our research and found that, in fact, same vulnerable firmware component
is also used in at least two other Cisco Linksys models - WRT54G3G and probably WRT310N.
Could be others.

Moreover, vulnerability turns out even more dangerous, since we have discovered that same vulnerable
firmware component is also used across many other big-brand router manufacturers and many
smaller vendors.

Vulnerability itself is located in Broadcom UPnP stack, which is used by many router manufacturers
that produce or produced routers based on Broadcom chipset.
We have contacted them with vulnerability details and we expect patches soon.
However, we would like to point out that we have sent more than 200 e-mails to various router
manufacturers and various people, without much success.

Some of the manufacturers contacted regarding this vulnerability are:
- Broadcom
- Asus
- Cisco
- TP-Link
- Zyxel
- D-Link
- Netgear
- US Robotics
- and so on.

Full vulnerability description is available here:
http://www.defensecode.com/subcategory/advisories-28

Regards,
Leon Juranic
CEO

15 comments:

  1. We're really sorry. But you'll have to do it by yourself. :)

    ReplyDelete
  2. This comment has been removed by the author.

    ReplyDelete

  3. Certain, it'd be wonderful to gain a sound estimations of Vitapulse , PQQ, and CoQ10 from true blue meals step by step, regardless, the actuality may it have the capacity to be can be altogether hard to totally hold quick to a reliably thin down method that licenses you to get satisfactory of those fragments into the body whilst in like manner keep away from dinners which have unfavorable flourishing proposals.

    Different normal dinners resources of CoQ10, NAC, and PQQ similarly strike get the chance to be higher calorie meals that join higher extents of drenched muscle to fat remainders, that are unfathomably poor for the heart flourishing paying little notice to the give of CoQ10, NAC, and PQQ these dinners offer.

    CoQ10:

    For instance, CoQ10 is routinely present in higher obsessions in meals this kind of as liver, kidney, heart, ground sirloin sandwich, sardines, and mackerel – yet eating up these dinners may trigger other whole deal thriving issues. People who recognize consuming a great deal of veggies on the reliably foundations could get CoQ10 in spinach, broccoli, cauliflower, and vegetables.

    ReplyDelete
  4. packers and movers in pune
    packers and movers in noida
    Packers and movers in delhi@
    http://www.verified5.co.in/packers-and-movers-delhi/
    Packers and movers in gurgaon@
    http://www.verified5.co.in/packers-and-movers-gurgaon/
    Packers and movers in pune@
    http://www.verified5.co.in/packers-and-movers-pune/
    Packers and movers in ghaziabad@
    http://www.verified5.co.in/packers-and-movers-ghaziabad/
    Packers and movers in faridabad@
    http://www.verified5.co.in/packers-and-movers-faridabad/
    Packers and movers in hyderabad@
    http://www.verified5.co.in/packers-and-movers-hyderabad/
    Packers and movers in trivandrum@
    http://www.verified5.co.in/packers-and-movers-trivandrum/
    Packers and movers in noida@
    http://www.verified5.co.in/packers-and-movers-noida/

    ReplyDelete
  5. Packers and movers in delhi@
    http://www.thepackersmoversdelhi.com

    ReplyDelete
  6. packers and movers in india@
    https://quicksoluction.com/
    packers and movers in delhi@
    http://quicksoluction.com/packers-and-movers-in-delhi.html
    packers and movers in mumbai@
    http://quicksoluction.com/packers-and-movers-in-mumbai.html
    packers and movers in pune@
    http://quicksoluction.com/packers-and-movers-in-pune.html
    packers amd movers in gurgaon@
    http://quicksoluction.com/packers-and-movers-in-gurgaon.html

    ReplyDelete
  7. Henna tattoo mehndi designs designs are gaining significant popularity for a lot of reasons. Among their other benefits, these beautiful tattoos also enables you to "test drive" your favorite design before permanently inking arf player it of your body.

    ReplyDelete
  8. Also, using henna z4root apk allows that alter the actual art easily and frequently if you wish to! If you are not absolutely certain about the tattoo you are considering, try it as a henna how to perform wudu tattoo first and provide it a whirl good night messages for girlfriend!

    ReplyDelete