Införskaffade en av min ISP rekommenderad router och skannade datorn precis med Avast. Avast upptäckte följande sårbarhet på min router:
Följande kommando i cmd visar att routern minsann kör en lägre version än 2.78:
Detta är väldigt oroväckande. Jag vill inte använda en sårbar router.
Vet ni någonting mer om vad jag själv kan göra för att åtgärda problemet - eller hänger det helt på att min ISP lägger ut en uppdatering? Tror ni jag kan ringa min ISP och tvinga de att ta tillbaka den?
Blir faktiskt jävligt upprörd, routern var då fan inte billig heller. Nästa gång blir det kvalitetsköp i butik!
Citat:
Ursprungligen postat av Avast
DnsMasq heap buffer overflow vulnerability
Severity: High
Reference: CVE-2017-14491 | Google Security Blog
Description:
The affected device's DNS service is running an outdated version of the DnsMasq software which is known to have a heap buffer overflow vulnerability. A remote attacker can gain control of your network device and your Internet connection by sending malformed DNS packets to the device. It allows the attacker to intercept connections and perform a traffic hijack, or execute arbitrary code with unrestricted privileges as well as access all important and private data stored on the device -- your device login/password combination, your Wi-Fi password, and your configuration data.
Impact:
Any device connected to your network, including computers, phones, tablets, printers, security cameras, or any other networked device in your home or office network, may have an increased risk of compromise.
Recommendation:
The issue was fixed in DnsMasq software version 2.78, released in October 2017.
To solve the vulnerability on your device, apply the firmware or system update that contains DnsMasq software version 2.78 or higher provided by your device's manufacturer.
If an update addressing the vulnerability is not yet available for your device, you can secure your router or Wi-Fi hotspot with a strong password to minimize risks imposed by the vulnerability. We also advise you not to visit suspicious websites or run software from questionable sources.
Severity: High
Reference: CVE-2017-14491 | Google Security Blog
Description:
The affected device's DNS service is running an outdated version of the DnsMasq software which is known to have a heap buffer overflow vulnerability. A remote attacker can gain control of your network device and your Internet connection by sending malformed DNS packets to the device. It allows the attacker to intercept connections and perform a traffic hijack, or execute arbitrary code with unrestricted privileges as well as access all important and private data stored on the device -- your device login/password combination, your Wi-Fi password, and your configuration data.
Impact:
Any device connected to your network, including computers, phones, tablets, printers, security cameras, or any other networked device in your home or office network, may have an increased risk of compromise.
Recommendation:
The issue was fixed in DnsMasq software version 2.78, released in October 2017.
To solve the vulnerability on your device, apply the firmware or system update that contains DnsMasq software version 2.78 or higher provided by your device's manufacturer.
If an update addressing the vulnerability is not yet available for your device, you can secure your router or Wi-Fi hotspot with a strong password to minimize risks imposed by the vulnerability. We also advise you not to visit suspicious websites or run software from questionable sources.
Följande kommando i cmd visar att routern minsann kör en lägre version än 2.78:
Kod:
nslookup -type=txt -class=chaos version.bind 192.168.1.1
Detta är väldigt oroväckande. Jag vill inte använda en sårbar router.
Vet ni någonting mer om vad jag själv kan göra för att åtgärda problemet - eller hänger det helt på att min ISP lägger ut en uppdatering? Tror ni jag kan ringa min ISP och tvinga de att ta tillbaka den?
Blir faktiskt jävligt upprörd, routern var då fan inte billig heller. Nästa gång blir det kvalitetsköp i butik!
