Remote zero-day hole found in Linksys routers

Powered by SC Magazine
 

Researchers say all routers likely affected.

A zero-day vulnerability has been discovered in popular Cisco Linksys routers that allows hackers to gain remote root access.

The hole affects default installations of Linksys routers and is demonstrated in a proof of concept video.

A zero day attack is one which exploits a previously unknown vulnerability. 

An exploit was successfully tested against a Linksys model WRT54GL router by researchers at security firm DefenseCode, who said other models "are probably also affected".

 Cisco claims to have sold more than 70 million Linksys routers globally.

DefenseCode said all firmware versions are vulnerable, and claimed Cisco incorrectly stated the hole was fixed in its latest firmware release.

"Due to the severity of this vulnerability, once again we would like to urge Cisco to fix this vulnerability," the security firm said in a statement.

A patch is due out this week, days ahead of DefenseCode's scheduled release of the full vulnerability details.

A spokesperson for Cisco/Linksys said the company "takes the security of our products and customers’ home networks very seriously.

"Although we can confirm contact with DefenseCode, we have no new vulnerability information related to our WRT54GL or other home routers to share with customers at this time," the spokesperson said. "We will continue to review new information that comes to light and will provide customer updates as appropriate."

Copyright © SC Magazine, Australia


Remote zero-day hole found in Linksys routers
 
 
 
Top Stories
Abbott brings back Science minister in cabinet reshuffle
Science tacked onto to Industry title.
 
Beyond ACORN: Cracking the infosec skills nut
[Blog post] Could the Government's cybercrime focus be a catalyst for change?
 
The iTnews Benchmark Awards
Meet the best of the best.
 
 
Sign up to receive iTnews email bulletins
   FOLLOW US...
Latest Comments
Polls
Who do you trust most to protect your private data?







   |   View results
Your bank
  38%
 
Your insurance company
  4%
 
A technology company (Google, Facebook et al)
  8%
 
Your telco, ISP or utility
  8%
 
A retailer (Coles, Woolworths et al)
  3%
 
A Federal Government agency (ATO, Centrelink etc)
  19%
 
An Australian law enforcement agency (AFP, ASIO et al)
  14%
 
A State Government agency (Health dept, etc)
  6%
TOTAL VOTES: 1920

Vote
Do you support the abolition of the Office of the Information Commissioner?