Friday, January 11, 2013

DefenseCode Security Advisory (UPCOMING): Cisco Linksys Remote Preauth 0day Root Exploit

Story behind the vulnerability...

Months ago, we've contacted Cisco about a remote preauth (root access) vulnerability
in default installation of their Linksys routers that we've discovered. We gave them
detailed vulnerability description along with the PoC exploit for the vulnerability.

They said that this vulnerability was already fixed in latest firmware release...
Well, not this particular vulnerability, since the latest official Linksys firmware -
4.30.14, and all previous versions are still vulnerable.

Exploit shown in this video has been tested on Cisco Linksys WRT54GL, but other 
Linksys versions/models are probably also affected.
Cisco Linksys is a very popular router with more than 70,000,000 routers sold.
That's why we think that this vulnerability deserves attention.

According to our vulnerability disclosure policy, the vulnerability details will be
disclosed in following 2 weeks on http://www.defensecode.com/ , BugTraq and
Full Disclosure.
Due to the severity of this vulnerability, once again we would like to urge Cisco
to fix this vulnerability.

The vulnerability is demonstrated in the following video:

Kind Regards,
DefenseCode

60 comments:

  1. Thanks for doing this valuable research. I hope you will also think of the free software community and help them too by verifying if these issues are applicable to other firmware such as OpenWRT, DD-WRT and Tomato when you fully disclose.

    ReplyDelete
  2. Truth be told, a security watch nearby improves the probability that any fire will be accounted for to neighborhood fire before an aggregate misfortune happens. Fast Guard Service

    ReplyDelete
  3. This bit of composing is truly well beyond.
    paypal hack

    ReplyDelete
  4. Por lo tanto, ¿por qué no entrar en Internet y escribir Juegos gratuitos de Friv Games en su motor de búsqueda y ver qué resultados obtiene? Una vez que haya descubierto un sitio web que proporciona inscripción gratuita un gran sitio web de juegos, apúntese y listo. Puede jugar juegos Friv gratuitos tantas veces como lo desee. No hay límite en cuanto a la cantidad de veces que puede iniciar sesión y jugar gratis. Para encontrar una solución alternativa para encontrar sitios web excelentes para jugar Friv Games completamente gratis, puedes echar un vistazo a varios de los foros de juegos de Internet y preguntar a los usuarios cuáles son los mejores sitios de juegos gratuitos.

    ReplyDelete
  5. If you need to decide where are you going to live, just read https://essaydragon.com/blog/spend-the-entire-summer-holidays-on-campus You can read about the life on campus here.

    ReplyDelete
  6. It is really sad that there not really a safe system if we are on the internet. We are always prone to vulnerabilities. If great minds behind hacking systems are so sure that they cannot be traced they will like ly just stay in their home and not hide underground.

    Scott Porter (stamped concrete)

    ReplyDelete
  7. كشف تسربات المياة بالقصيم
    شركة مكافحة حشرات بالقصيم
    شركة مكافحة النمل الابيض بالقصيم
    شركة رش مبيدات بالقصيم
    شركة تنظيف بالقصيم
    شركة تنظيف شقق بالقصيم
    شركة تنظيف فلل بالقصيم
    شركة تنظيف كنب بالقصيم
    شركة تنظيف مجالس بالقصيم
    شركة تنظيف منازل بالقصيم
    If you are looking for comfort in cleaning without the trouble or misery, you need a company with a good reputation, and have the experience of what makes you secure yourself and your company and your factory and your family and you need your company to clean the Qassim, this highly experienced company And the ultimate quality works on the cleaning of houses steam, and by using the latest equipment and global services, and detergents developed, and provides you with a global experience in the implementation of various tasks, you will not find a similar in the Kingdom, and the prices are not competitive at all

    ReplyDelete
  8. Internal attacks are always potential threats. 16 inches weave hair One of the important ways you can protect against them is to correctly manage who can access your computer, files, hardware, servers, internet connection and usage checks so you can follow Watch exactly what they are doing on it.
    18 inches weave hair

    ReplyDelete
  9. Wow! It's such a superb blog you have here. Aside that you blog is filled with useful information. Best of all is loading really fast.

    How to make money online fast with NNU Income Program,
    DLS 19 Mod Apk,
    Best free movie download sites,
    Unlimited Airtel free browsing cheat 2019,
    Download latest PES 2018 free,
    How to Secure Bitcoin Wallet, Download Tubemate for iPhone.

    ReplyDelete
  10. Great Posting…
    Keep doing it…
    Thanks

    Digital Marketing Certification Course in Chennai - Eminent Digital Academy
    https://www.eminentdigitalacademy.com/

    ReplyDelete
  11. Thank you so much for sharing, very well written.

    ---------------------------------------------------
    YouTube Clone | Video Sharing Script

    ReplyDelete
  12. https://www.koshercertifications.in/

    ReplyDelete
  13. Here is a good Weblog You might Come across Fascinating that we Encourage You
    โปรโมชั่นGclub ของทางทีมงานตอนนี้แจกฟรีโบนัส 50%
    เพียงแค่คุณสมัคร Gclub กับทางทีมงานของเราเพียงเท่านั้น
    ร่วมมาเป็นส่วนหนึ่งกับเว็บไซต์คาสิโนออนไลน์ของเราได้เลยค่ะ
    สมัครสล็อตออนไลน์ >>> goldenslot
    สนใจร่วมลงทุนกับเรา สมัครเอเย่น Gclub คลิ๊กได้เลย

    ReplyDelete
  14. Enjoyed studying this, very good stuff, thanks.
    เว็บไซต์คาสิโนออนไลน์ที่ได้คุณภาพอับดับ 1 ของประเทศ
    เป็นเว็บไซต์การพนันออนไลน์ที่มีคนมา สมัคร Gclub Royal1688
    และยังมีหวยให้คุณได้เล่น สมัครหวยออนไลน์ ได้เลย
    สมัครสมาชิกที่นี่ >>> Gclub Royal1688
    ร่วมลงทุนสมัครเอเย่นคาสิโนกับทีมงานของเราได้เลย

    ReplyDelete
  15. Security services need to give great importance to defense code this is what we teach in our security company in Dubai, should be zero tolerance policy.

    ReplyDelete
  16. The dynamism of the Power combined together of a core focused high-spirited,aggressive and enthusiastic team at Bangalore Secretarial Services with an bulls eye view of the envisioned target is success Mantra in Bangalore Secretarial Services and the vitality of the Power combined together of focused high-spirited individuals show cases the buoyancy and ebullience in our set goals and is the success Mantra in Bangalore Secretarial Services
    https://www.bangaloresecretary.com/placements-consultancy-services

    ReplyDelete

  17. we Headhunters in India know precisely where to look for your desired person and existing clients with us know that we are the only the most convenient and straight forward head hunting firm in India and user-friendly and time-effective way to fill a role.
    https://www.bangaloresecretary.com/head-hunters-in-India

    ReplyDelete
  18. Great blog..Thanks for sharing such a great blog..I like your blog very much…..such a good information..
    Mobile App Development Company

    ReplyDelete

  19. شركه عزل فوم بالرياض

    أيضاً تسبب في سقوط الطلاء وظهور التشققات، ولكن من الآن لا داعي

    شركه تنظيف منازل بالقطيف

    شركه تنظيف منازل بالجبيل

    شركه تنظيف منازل بالدمام
    للقلق لأن شركة عزل أسطح تقدم لعملائها الكرام في كافة أنحاء المملكة العربية السعودية .
    افضل شركة عزل أسطح

    شركه تنظيف مكيفات بالرياض
    شركه عزل فوم بالدمام

    ReplyDelete
  20. Anyone who reads this post will find it great, me too, I will continue to follow your posts. It's great, wish you success in the next blog, this is a post that we all should read at least once.
    abcya 4, io jogos for school, friv 4 school games 2019, cá koi mini

    ReplyDelete
  21. thanks for ur valuable information,keep going touch with us

    Scaffolding dealers in chennai

    ReplyDelete
  22. Nice Presentation and its hopefull words..
    if you want a cheap web hosting in web
    cheap web hosting company chennai

    ReplyDelete
  23. Hi there, just became aware of your blog through Google, and found that it’s really informative and useful.
    factocert

    ReplyDelete
  24. Customer reviews, feedback, and complaints always help people find the best services and products. Therefore, keep posting your important feedback about services and products.

    CLICK HERE

    ReplyDelete
  25. Hello Writer, such an amazing article written. Great job
    This is Vipin kumar, we have skilled professional developers with 12+ years of experience. If you have any requirement regarding Android & iOS mobile app development then you can revert me.

    ReplyDelete
  26. India’s largest Own Brand Marketplace. Choose Your Favorite Product here and Enquiry Now! Trade Assurance. 100% Refund and Valueable Products. V2M Nakoda Mobile deals in Mobile Accessories and Mobile Repairing Tools in Whole Sale Prices.
    my youtube channel is v2m nakoda mobile
    visit my website all mobile accessories
    about us
    MOBILE REPAIRING TOOLS

    ReplyDelete
  27. Hello Writer, such a nice article written. Good job
    This is Vipin kumar, we have expert driver with up to 5+ year experience. We offer Book One Way Drop Taxi. If you have any type of requirement regarding taxi and cab service then contact us at +91 79992315344.

    ReplyDelete
  28. Thanks for sharing such a great blog... I am impressed with you taking time to post a nice info. iPad Application Development
    Hybrid App Development
    Web Development Services

    ReplyDelete
  29. very nice graphics, your creativity is very impressive. it is very good information for make Creativity PHP Development

    Laravel Development Company
    CodeIgniter Development Company
    ASP.Net Development Company

    ReplyDelete
  30. It is very nice article for all readers and learners. Thank you for sharing with us.
    IDesignPassion

    ReplyDelete