(CVE-2014-2718) ASUS wireless router updates vulnerable to a Man in the Middle attack

BoerenkoolMetWorst · Oct 31, 2014

Today I am disclosing one additional vulnerability, submitted as CVE-2014-2718. The ASUS RT- series of routers rely on an easily manipulated process to determine if an update is needed, and to retrieve the necessary update file. In short, the router downloads via clear-text a file from http://dlcdnet.asus.com, parses it to determine the latest firmware version, then downloads (again in the clear) a binary file matching that version number from the same web site.
Click to expand...

http://dnlongen.blogspot.ro/2014/10/CVE-2014-2718-Asus-RT-MITM.html

Log in or Sign up

(CVE-2014-2718) ASUS wireless router updates vulnerable to a Man in the Middle attack

BoerenkoolMetWorst Registered Member

Log in or Sign up

(CVE-2014-2718) ASUS wireless router updates vulnerable to a Man in the Middle attack

BoerenkoolMetWorst Registered Member

Useful Searches