Netgear have issued a security advisory – you should check your Netgear equipment. Impacted equipment should be patched as soon as possible: Security Advisory for Pre-Authentication Buffer Overflow on Some Routers, PSV-2019-0208 | Answer | NETGEAR Support
Do you have a D-Link or Netgear router – if so they may be vulnerable
There is an interesting article over on SANS Internet Storm today – Johannes Ullrich has been tracking some public vulnerabilities in D-Link and Netgear devices that are not mentioned on the vendor pages and for many there are no patches available: What’s the deal with these router vulnerabilities? – SANS …
Continue reading “Do you have a D-Link or Netgear router – if so they may be vulnerable”
CISA adds twelve vulnerabilities to the Known Exploited Vulnerabilities Catalog
These include products from Google, D-Link, QNAP, Apple, MicroTik, Oracle, Fortinet, Netgear and Android, with D-Link getting the most mentions. CISA Adds Twelve Known Exploited Vulnerabilities to Catalog | CISA
Malware attacking routers
A large number of popular routers are the target of some sophisticated malware, that can take control of connected Windows, macOS, and Linux devices. A New, Remarkably Sophisticated Malware Is Attacking Routers | WIRED The malware is called ZuoRAT and is impacting routers by Draytek, Cisco and Netgear among many …
The US Cybersecurity and Infrastructure Security Agency adds 36 known exploits to it’s data base
CISA Adds 36 Known Exploited Vulnerabilities to Catalog | CISA Updates to the Known Exploited Vulnerabilities Catalog include: Owl Labs QNAP Google Cisco Adobe Netgear Microsoft
Flaw discovered in third-party code libraries used by hundreds of vendors
Among the vendors using uClibc and the uClibc variant uClibc-ng are Linksys, Netgear, Axis and Gentoo an embedded Linux distribution. This page from Ars Technica has links to the impacted devices: Gear from Netgear, Linksys, and 200 others has unpatched DNS poisoning flaw | Ars Technica Vendors were informed of …
Continue reading “Flaw discovered in third-party code libraries used by hundreds of vendors”
