ISE SOHO Vulnerability Catalog Published - Independent Security ...

More documents

Recommendations

Info

Table of Contents Table of Contents ....................................................................................................................................... 2 Revisions ........................................................................................................................................................ 4 Summary ........................................................................................................................................................ 5 Verizon FIOS Actiontec Model MI424WR-‐GEN3I ......................................................................... 6 Vulnerability: Cross-‐Site Request Forgery ................................................................................. 6 Vulnerability: Cross-‐Site Scripting ................................................................................................ 9 TRENDnet TEW-‐812DRU .................................................................................................................... 11 Vulnerability: Cross-‐Site Request Forgery .............................................................................. 11 Vulnerability: Unvalidated URL Redirect ................................................................................ 13 Vulnerability: Multiple Buffer Overflow ................................................................................... 15 Vulnerability: Reflective Cross-‐Site Scripting ........................................................................ 16 Vulnerability: Multiple Command Injection ........................................................................... 18 Vulnerability: Backdoor .................................................................................................................. 22 TP-‐LINK TL-‐WR1043ND ...................................................................................................................... 24 Vulnerability: Cross-‐Site Request Forgery .............................................................................. 24 Vulnerability: Denial of Service .................................................................................................... 26 Vulnerability: FTP Directory Traversal .................................................................................... 27 Vulnerability: SMB Symlink Traversal ...................................................................................... 29 Netgear WNDR4700 .............................................................................................................................. 31 Vulnerability: Authentication Bypass ....................................................................................... 31 Vulnerability: Unauthenticated Hardware Linking ............................................................. 32 Vulnerability: Information Disclosure ...................................................................................... 34 Vulnerability: SMB Symlink Traversal ...................................................................................... 35 Vulnerability: Media Server Denial of Service ....................................................................... 36 Vulnerability: Cross-‐Site Scripting ............................................................................................. 38 Linksys WRT310v2 ................................................................................................................................ 43 Vulnerability: Cross-‐Site Request Forgery .............................................................................. 43 Vulnerability: Cross-‐Site Scripting ............................................................................................. 45 Linksys EA6500 ....................................................................................................................................... 48 Vulnerability: Insufficient Validation of Configuration File ............................................. 48 Vulnerability: Unvalidated URL Redirect ................................................................................ 50 Vulnerability: DOM Cross-‐Site Scripting .................................................................................. 51 Vulnerability: Information Disclosure ...................................................................................... 54 D-‐Link DIR-‐865L ..................................................................................................................................... 57 Vulnerability: Cross-‐Site Request Forgery .............................................................................. 57 Vulnerability: Information Disclosure ...................................................................................... 59 Vulnerability: Symlink Traversal ................................................................................................ 60 Vulnerability: Unauthenticated Hardware Linking ............................................................. 62 Vulnerability: PHP File Inclusion ................................................................................................ 64 Belkin N900 ............................................................................................................................................... 66 Vulnerability: Cross-‐Site Request Forgery .............................................................................. 66 2
Vulnerability: Cross-‐Site Scripting ............................................................................................. 68 Vulnerability: Authentication Bypass ....................................................................................... 71 Vulnerability: Authorization Header Failure ......................................................................... 72 Belkin N300 ............................................................................................................................................... 74 Vulnerability: Cross-‐Site Request Forgery .............................................................................. 74 Vulnerability: Cross-‐Site Scripting ............................................................................................. 76 Vulnerability: Authentication Bypass ....................................................................................... 78 Vulnerability: Authorization Header Failure ......................................................................... 80 Belkin F5D8236-‐4 v2 ............................................................................................................................. 82 Vulnerability: Cross-‐Site Request Forgery .............................................................................. 82 Vulnerability: Cross-‐Site Scripting ............................................................................................. 84 Vulnerability: Authentication Bypass ....................................................................................... 85 ASUS RT-‐N56U ......................................................................................................................................... 88 Vulnerability: Cross-‐Site Request Forgery .............................................................................. 88 Vulnerability: Persistent Code Execution (File-‐system Permissions) ......................... 90 ASUS RT-‐AC66U ....................................................................................................................................... 92 Vulnerability: Cross-‐Site Request Forgery .............................................................................. 92 Vulnerability: Persistent Code Execution (File-‐system Permissions) ......................... 94 Vulnerability: Multiple Buffer Overflow ................................................................................... 95 TP-‐LINK TL-‐WDR4300 ...................................................................................................................... 100 Vulnerability: Cross-‐Site Request Forgery ........................................................................... 100 Vulnerability: SMB Symlink Traversal ................................................................................... 101 3
Page 1: Vulnerability Catalog Revision 1 SO
Page 5 and 6: Summary ISE has performed extensiv
Page 7 and 8: Solution ♦ There currently is not
Page 9 and 10: ♦ Advisory/Video: http://infosec4
Page 11 and 12: TRENDnet TEW-‐812DRU Vulnerab
Page 13 and 14: Disclosure Timeline ♦ 4/11/2013
Page 15 and 16: Vulnerability: Multiple Buffer O
Page 17 and 18: JavaScript or HTML code in the vict
Page 19 and 20: ♦ There currently is not a soluti
Page 21 and 22: } function _enable23(){ document
Page 23 and 24: TRENDnet TEW-691GR and TEW-692GR
Page 25 and 26: Proof of Concept Exploit TP-
Page 27 and 28: Details ♦ The router will need to
Page 29 and 30: ♦ 3/20/2013 - Contacted TP-Link
Page 31 and 32: Netgear WNDR4700 Vulnerability:
Page 33 and 34: all files stored on the external st
Page 35 and 36: References ♦ Advisory/Video: http
Page 37 and 38: Attack Requirements ♦ The attacke
Page 39 and 40: Figure 2 - WNDR4700 XSS #1 39
Page 41 and 42: Figure 4 -‐ WNDR4700 XSS #
Page 43 and 44: Linksys WRT310v2 Vulnerability:
Page 45 and 46: function PwN() {doc
Page 47 and 48: ♦ Advisory/Video: http://infosec4
Page 49 and 50: Figure 7 - EA6500 Malicious Co
Page 51 and 52: Solution ♦ There is no solution t
Page 53 and 54:
Figure 9 - EA6500 DOM XSS Disc
Page 55 and 56:
Content-‐Type: application/jso
Page 57 and 58:
D-‐Link DIR-‐865L Vulnera
Page 59 and 60:
document.DLINK.submit() Disc
Page 61 and 62:
Description The D-Link DIR-865L rou
Page 63 and 64:
♦ Additional information for vend
Page 65 and 66:
♦ 7/26/2013 - Public Disclosure R
Page 67 and 68:
these issues can be found here: htt
Page 69 and 70:
♦ Validate HTTP Basic Authenticat
Page 71 and 72:
Vulnerability: Authentication Byp
Page 73 and 74:
Impact If an unauthenticated attack
Page 75 and 76:
these issues can be found here: htt
Page 77 and 78:
attacker from gaining access if an
Page 79 and 80:
var wan_type=0; var wan_mac_addr
Page 81 and 82:
attacker from gaining access if an
Page 83 and 84:
Solution ♦ There currently is not
Page 85 and 86:
Disclosure Timeline ♦ 2/11/2013 -
Page 87 and 88:
var bEncPassword=1; var auto_che
Page 89 and 90:
Solution ♦ There is no solution t
Page 91 and 92:
studies/routers/#recommendationsVen
Page 93 and 94:
Solution ♦ There is no solution t
Page 95 and 96:
studies/routers/#recommendationsVen
Page 97 and 98:
# The ASUS RT-‐AC66U contai
Page 99 and 100:
try: print """ [*] Attempting
Page 101 and 102:
Disclosure Timeline ♦ 7/26/2013 -
show all

ISE SOHO Vulnerability Catalog Published - Independent Security ...

Create successful ePaper yourself

Delete template?

Save as template?