Zero-day vulnerability discovered in TP-Link routers (www.techzine.eu)
from nemeski@mander.xyz to cybersecurity@sh.itjust.works on 05 Sep 15:03
https://mander.xyz/post/37371443

#cybersecurity

threaded - newest

jewbacca117@lemmy.world on 05 Sep 15:29 next collapse

In addition to the back doors?

Dsklnsadog@lemmy.dbzer0.com on 05 Sep 15:56 collapse
sunzu2@thebrainbin.org on 05 Sep 15:31 next collapse

Proprietary software

wizardbeard@lemmy.dbzer0.com on 05 Sep 16:18 next collapse

Glad I only have two of their “dumb” switches then.

witty_username@feddit.nl on 05 Sep 18:10 next collapse

“[It] affects several popular models, including the Archer AX10 and AX1500.

[…] input from external messages is used directly to calculate a buffer length […] without any boundary checks. […] A payload of 4096 bytes […] confirmed that the program counter can be overwritten. This means that complete system compromise with root privileges is achievable.”

Sounds very fixable

treadful@lemmy.zip on 05 Sep 18:38 next collapse

This happens every week, it seems.

ImgurRefugee114@reddthat.com on 06 Sep 00:55 collapse

A new vulnerability in a TP-Link device? Oh no, it must be a day ending in Y