Palo Alto Networks reveals D-Link home router vulnerabilities

guest · Jun 12, 2020

Palo Alto Networks reveals D-Link home router vulnerabilities
June 12, 2020
https://www.cyberscoop.com/d-link-home-routers-vulnerabilities-palo-alto-networks/

Taiwanese consumer technology manufacturer D-Link has issued security fixes for a series of bugs that, if exploited, could have enabled hackers to steal passwords and other sensitive data from home internet routers during the coronavirus pandemic.

If used in concert, the vulnerabilities would have allowed attackers to scan network traffic to steal session cookies, and upload or download sensitive files, Palo Alto Networks’ Unit 42 researchers said in findings published Friday. In some cases, the vulnerabilities could have helped attackers to conduct denial of service attacks.
While D-Link has released a security update for the flaws in question [...]

Palo Alto Networks researchers did not say whether hackers had exploited the vulnerabilities they found.
Click to expand...

Palo Alto Networks - Unit42: New Vulnerabilities Found on D-Link Home Routers

The following are the six vulnerabilities found:

CVE-2020-13782: Improper Neutralization of Special Elements Used in a Command (Command Injection)

CVE-2020-13786: Cross-Site Request Forgery (CSRF)

CVE-2020-13785: Inadequate Encryption Strength

CVE-2020-13784: Predictable seed in pseudo-random number generator

CVE-2020-13783: Cleartext storage of sensitive information

CVE-2020-13787: Cleartext transmission of sensitive information

Click to expand...

Log in or Sign up

Palo Alto Networks reveals D-Link home router vulnerabilities

guest Guest

Log in or Sign up

Palo Alto Networks reveals D-Link home router vulnerabilities

guest Guest

Useful Searches