#роутеры
-
Unpatched Broadcom Wi-Fi Flaw Hands Nearby Attackers Root on Routers
Researcher Quentin Kaiser showed that a bug in Broadcom's own WPS code lets an attacker within Wi-Fi range run code as root — with no network password and no pairing. There is no patch and no CVE.
-
D-Link warns of maximum-severity zero-day in DIR-822A routers
A maximum-severity flaw in legacy DIR-822A routers already has a public PoC exploit — and no patch is available yet.
-
Two Factory Implants with Root Access Found in ZBT Router Firmware
Researchers at VulnCheck have discovered two undocumented factory implants in the firmware of Chinese-made ZBT routers, giving an unauthenticated attacker remote command execution with root privileges.
-
Vulnerability in Calix routers exposes home devices to the entire internet
An unpatched hole in Calix GS7 XGS routers lets attackers create port-forwarding rules remotely and without authentication, bypassing NAT and the firewall. The manufacturer never responded to the researcher's outreach.
-
Zbtlink Routers Ship with a Factory Backdoor That Opens Passwordless Root Access
Researchers at VulnCheck have found a built-in backdoor in every firmware image from Chinese manufacturer Zbtlink: it hands an attacker an interactive root shell without any authentication whatsoever.
-
Unauthenticated RCE Vulnerability Found in the Motorola MR2600 Router
A security researcher has reported a critical vulnerability in the Motorola MR2600 router that allows arbitrary code to be executed on the device without authentication. The details have been published in an open report.
-
Hidden Backdoor Found in Tenda Router Firmware
Researchers have discovered a hidden authentication loophole in the firmware of several Tenda router models that allows administrative access to the device's web management panel.