Organizations Warned of Critical Vulnerabilities in NetModule Routers

guest · Aug 10, 2022

August 10, 2022

Flashpoint is warning organizations of two newly identified critical vulnerabilities in NetModule Router Software (NRSW) that could be exploited in attacks.

Acquired by Belden earlier this year, NetModule provides IIoT and industrial routers, vehicle routers, and other types of wireless M2M connectivity products.
Click to expand...

According to Flashpoint, its researchers recently identified two critical flaws in NetModule’s router software that remote attackers could exploit to bypass authentication and access administrative functionality.

The security issues were found in code that NetModule removed from NRSW in 2018, but hundreds of devices are still running the older platform versions and can be accessed from the internet, Flashpoint says.
Click to expand...

Flashpoint also says it has notified NetModule of these vulnerabilities, and that it has encouraged the vendor to inform customers of their existence, even if they do not impact newer device models.

“At the time of this publishing, NetModule clients using vulnerable versions of NRSW have no knowledge of these critical vulnerabilities affecting their devices,” the cybersecurity firm says.
Click to expand...

Flashpoint: Organizations Deploying NetModule Router Software May Be Vulnerable to Exploitation

Flashpoint’s vulnerability research team discovers new vulnerabilities, working closely with vendors and customers to ensure that these issues are addressed—while also analyzing known vulnerabilities to uncover additional details. Here we detail research related to a commonly used network routing software.
Click to expand...

Flashpoint has confirmed that there are hundreds of vulnerable devices that are internet-accessible, with a strong possibility of many more being deployed across the world.

These vulnerabilities were found during audits of some older releases due to their still widespread use. Normally, we don’t contact vendors about issues they’ve already fixed, but NetModule never posted a security advisory or included information in their release changelogs.
This means that customers running these old releases are to this day, unaware that they contain critical vulnerabilities.
Click to expand...

The importance of security advisories
Given the potential for exploitation, Flashpoint researchers had hoped that an alert or advisory from NetModule would convince affected customers to upgrade to fixed versions. However, NetModule has stated that they have no plans of releasing a security advisory—citing an internal policy of only addressing supported releases. Furthermore, they state that they already publish Discontinuation Notices and continuously ask customers to keep devices up-to-date.
Click to expand...

Log in or Sign up

Organizations Warned of Critical Vulnerabilities in NetModule Routers

guest Guest

Log in or Sign up

Organizations Warned of Critical Vulnerabilities in NetModule Routers

guest Guest

Useful Searches