Microsoft finds Netgear router bugs enabling corporate breaches

guest · Jul 1, 2021

Microsoft finds Netgear router bugs enabling corporate breaches
June 30, 2021
https://www.bleepingcomputer.com/ne...gear-router-bugs-enabling-corporate-breaches/

Attackers could use critical firmware vulnerabilities discovered by Microsoft in some NETGEAR router models as a stepping stone to move laterally within enterprise networks.

The security flaws impact DGN2200v1 series routers running firmware versions before v1.0.0.60 and compatible with all major DSL Internet service providers.
They allow unauthenticated attackers to access unpatched routers' management pages via authentication bypass, gain access to secrets stored on the device, and derive saved router credentials using a cryptographic side-channel attack.
Click to expand...

The three bugs "can compromise a network's security—opening the gates for attackers to roam untethered through an entire organization," Microsoft 365 Defender Research Team's Jonathan Bar Or explains.

"The communication was flagged as anomalous by machine learning models, but the communication itself was TLS-encrypted and private to protect customer privacy, so we decided to focus on the router and investigate whether it exhibited security weaknesses that can be exploited in a possible attack scenario," the researcher added.
Click to expand...

Log in or Sign up

Microsoft finds Netgear router bugs enabling corporate breaches

guest Guest

Log in or Sign up

Microsoft finds Netgear router bugs enabling corporate breaches

guest Guest

Useful Searches