D-Link closes hole
Posted by: Timothy Weaver on 12/05/2013 12:15 PM
[
Comments
]
An administrative backdoor in D-Links SOHO broadband routers has been closed.
The patch has now been issued here.
All an attacker needs to do is to set their browser user agent string to read xmlset_roodkcableoj28840ybtide. This drops them directly into the admin page without a login.
Only turning off remote administration would protect the device.
It is possible that someone dropped the code during development and forgot to remove it.
*note: read the script backwards.
The patch has now been issued here.
All an attacker needs to do is to set their browser user agent string to read xmlset_roodkcableoj28840ybtide. This drops them directly into the admin page without a login.
Only turning off remote administration would protect the device.
It is possible that someone dropped the code during development and forgot to remove it.
*note: read the script backwards.
Comments
