Latest research has uncovered alarming security vulnerabilities in popular TP-Link and Netcomm routers. The discovered vulnerabilities if exploited could potentially allow an attacker to gain unauthorized access to the routers and execute arbitrary code on them. These vulnerabilities are deemed a serious threat and steps should be taken swiftly to mitigate them.
Researchers from the Check Point research team have discovered the vulnerabilities, which are located in the centralized management console and web-based settings of the routers. In particular, the TP-Link TD-W8970, AC1750 and W9980, as well as Netcomm NB604N, were found to contain serious flaws which could allow an attacker to log into the devices and execute remote code.
The discovered vulnerabilities exist when a user logs into the routers’ admin panel using cleartext, which allows an attacker to read login credentials, thereby enabling admin access, which provides full access to the settings of the routers.
The other vulnerability found, which is of particular concern, is a Command Injection vulnerability. This vulnerability is found when a user is entering commands into the settings console of the routers, which can lead to arbitrary command execution on Linux-based systems such as routers.
Due to the potential of this vulnerability to allow attackers to run batch scripts and execute commands on the routers, it is considered a serious issue and needs to be fixed as soon as possible. A security patch for the affected routers has been released by TP-Link and Netcomm to address the vulnerability, and users should make sure to install it immediately to protect their devices from potential attack.
These newly discovered vulnerabilities are a cause for worry and demonstrate the importance of keeping devices up to date with the latest security patches. Users need to be aware that regardless of the physical security of their routers, the cyber security threats can be just as daunting, and should be taken seriously.
This Cyber News was published on www.securityweek.com. Publication date: Sun, 22 Jan 2023 10:48:00 +0000