"The vulnerability is that on many, if not on almost all N66U units that have enabled https Web service access via the AiCloud feature, are vulnerable to un-authenticated directory traversal and full sensitive file disclosure," Lovett wrote in his earlier dispatch. The June 22 report found the "ability to traverse to any external storage plugged in through the USB ports on the back of the router," but researcher Kyle Lovett said he went public only after privately contacting Asus representatives two weeks earlier and getting a response that the reported behavior "was not an issue." In July, Lovett published a second disclosure that offered additional technical details. The guerilla-style hacking disclosure comes eight months after a security researcher publicly disclosed the underlying vulnerability that exposed the hard drives of Jerry and so many other Asus router users. They also published a torrent link containing more than 10,000 complete or partial lists of files stored on the Asus-connected hard drives. Two weeks ago, a group posted almost 13,000 IP addresses its members said hosted similarly vulnerable Asus routers. It's likely that Jerry wasn't the only person to find the alarming message had been uploaded to a hard drive presumed to be off-limits to outsiders.
You need to protect yourself and learn more by reading the following news article. "Your Asus router (and your documents) can be accessed by anyone in the world with an Internet connection.
"This is an automated message being sent out to everyone effected ," the message, uploaded to his device without any login credentials, read. An Ars reader by the name of Jerry got a nasty surprise as he was browsing the contents of his external hard drive over the weekend-a mysterious text file warning him that he had been hacked thanks to a critical vulnerability in the Asus router he used to access the drive from various locations on his local network.
0 kommentar(er)
